Back to bug 1372277

Who When What Removed Added
Xia Zhao 2016-09-01 10:18:03 UTC Priority unspecified medium
Xia Zhao 2016-09-01 10:19:58 UTC Keywords Regression
Troy Dawson 2016-09-01 22:15:59 UTC CC ewolinet, xiazhao
Flags needinfo?(xiazhao)
Status NEW ASSIGNED
Flags needinfo?(xiazhao)
Assignee lmeyer ewolinet
Status ASSIGNED MODIFIED
CC tdawson
Jeff Cantrill 2016-09-02 13:02:38 UTC Status MODIFIED ON_QA
CC jcantril
Troy Dawson 2016-09-02 13:30:45 UTC Status ON_QA MODIFIED
errata-xmlrpc 2016-09-02 13:32:02 UTC Status MODIFIED ON_QA
Xia Zhao 2016-09-05 01:53:15 UTC Status ON_QA VERIFIED
errata-xmlrpc 2016-09-27 00:35:30 UTC Doc Text Cause:
The OpenShift-Elasticsearch-Plugin did not remove the '.all' Kibana mapping for users that were cluster-admin but then had the role reverted.

Consequence:
If a user was no longer a cluster-admin they would still be able to view the '.all'
Doc Text Kibana mapping. They wouldn't be able to see the logs for projects they didn't have access to
Doc Text , but they would still incorrectly see the mapping.

Fix:
Update the OpenShift-Elasticsearch-Plugin to remove the '.all' Kibana mapping to users that are not cluster-admin.

Result:
Ordinary users are not able to see the '.all' mapping if they
Doc Text are no longer cluster-admins
Doc Type If docs needed, set a value Bug Fix
Target Release --- 3.3.0
Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-09-27 09:47:10 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-09-27 05:47:10 UTC
John Skeoch 2016-09-30 02:16:07 UTC CC wsun
Dan McPherson 2017-03-08 18:26:17 UTC Target Release 3.3.0

Back to bug 1372277