CVE-2023-32199

A vulnerability has been identified within Rancher 
Manager, where after removing a custom GlobalRole that gives 
administrative access or the corresponding binding, the user still 
retains access to clusters.This only affects custom Global Roles thathave a * on * in * rule for resources or have a * on * rule for non-resource URLs