Is this a function of UCP? Solution: image role-based access control

UCP provides RBAC for managing access to the cluster and its deployed resources, not for controlling access to individual Docker images in a registry.

While UCP provides role-based access control (RBAC) for managing access to cluster resources (like services, stacks, and nodes) and the UCP interface itself, it does not directly manage RBAC for individual images stored in a registry. Image-specific RBAC, such as who can push/pull specific images, is typically a feature of a Docker registry like Docker Trusted Registry (DTR).