Bug 1007285

Summary: system groups are global for all organizations
Product: Red Hat Satellite Reporter: Ales Dujicek <adujicek>
Component: APIAssignee: Bryan Kearney <bkearney>
Status: CLOSED CURRENTRELEASE QA Contact: Hayk Hovsepyan <hhovsepy>
Severity: unspecified Docs Contact:
Priority: medium    
Version: NightlyCC: ehelms, hhovsepy, omaciel, paji
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-04-24 17:08:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ales Dujicek 2013-09-12 08:50:47 UTC
Description of problem:

system groups seem like they belong to all organizations:

1) "system_group list --org org" - lists all system groups from all organizations
> system_group create --org "org-1" --name "grp-1"
Successfully created system group [ grp-1 ]
> system_group create --org "org-2" --name "grp-2"
Successfully created system group [ grp-2 ]
> system_group list --org "org-1" --noheading
13 grp-1
14 grp-2

2) when system is registered in org-1, I can add it to system group in org-2
# subscription-manager register --name "system" --org org-1 ...
The system has been registered with id: f64fced9-45ae-4274-9786-154046f13d23 
> system_group create --org org-2 --name grp-2
Successfully created system group [ grp-2 ]
> system add_to_groups --org "org-1" --name "system" --system_groups "grp-2"
Successfully added system groups to system [ system ]
> system_group systems --org "org-2" --name "grp-2"
f64fced9-45ae-4274-9786-154046f13d23 system 

3) I can add system groups to activation key which is not in the same org
> activation_key create --org org-1 --name key1 --environment Library --content_view "Default Organization View"
> system_group create --org org-2 --name grp2
> activation_key add_system_group --org org-1 --name key1 --system_group grp2
Successfully added system group to activation key [ key1 ]

Version-Release number of selected component (if applicable):
katello-glue-elasticsearch-1.4.6-1.git.48.663056d.el6.noarch
katello-repos-1.4.2-1.el6.noarch
katello-candlepin-cert-key-pair-1.0-1.noarch
katello-cli-1.4.3-1.git.33.7c739e9.el6.noarch
katello-certs-tools-1.4.4-1.el6.noarch
katello-glue-candlepin-1.4.6-1.git.48.663056d.el6.noarch
katello-1.4.6-1.git.48.663056d.el6.noarch
katello-qpid-broker-key-pair-1.0-1.noarch
katello-cli-common-1.4.3-1.git.33.7c739e9.el6.noarch
katello-configure-1.4.5-1.el6.noarch
pulp-katello-plugins-0.2-1.el6.noarch
katello-glue-pulp-1.4.6-1.git.48.663056d.el6.noarch
katello-all-1.4.6-1.git.48.663056d.el6.noarch
katello-selinux-1.4.4-1.git.1.7abb02b.el6.noarch
katello-qpid-client-key-pair-1.0-1.noarch
katello-common-1.4.6-1.git.48.663056d.el6.noarch


How reproducible:
always

Comment 1 Og Maciel 2013-09-12 12:40:51 UTC
I have the feeling that when we query for system groups, we're not filtering by organizations, so eventually this same query would return all system groups in the system, regardless of the organization being queried for.

Comment 2 Partha Aji 2013-09-13 17:49:19 UTC
Should be fixed when this PR gets merged
https://github.com/Katello/katello/pull/2942

Comment 6 Hayk Hovsepyan 2013-10-10 12:29:14 UTC
Verified on revision:
signo-0.0.22-2.el6sat.noarch
Katello-Katello-Installation-RegisterRHNClassic-1.1-4.noarch
foreman-1.3.0-15.el6sat.noarch
katello-cli-common-1.4.3-19.el6sat.noarch
openldap-2.4.23-31.el6.x86_64
pulp-nodes-common-2.3.0-0.17.beta.el6sat.noarch
candlepin-scl-quartz-2.1.5-5.el6_4.noarch
candlepin-0.8.25-1.el6sam.noarch
elasticsearch-0.19.9-8.el6sat.noarch
katello-glue-pulp-1.4.6-29.el6sat.noarch
katello-qpid-client-key-pair-1.0-1.noarch
katello-agent-1.4.4-3.el6sat.noarch
Katello-Katello-Installation-Satellite6Latest-1.0-12.noarch
candlepin-scl-runtime-1-5.el6_4.noarch
apr-util-ldap-1.3.9-3.el6_0.1.x86_64
katello-qpid-broker-key-pair-1.0-1.noarch
foreman-proxy-1.3.0-3.el6sat.noarch
foreman-postgresql-1.3.0-15.el6sat.noarch
katello-cli-1.4.3-19.el6sat.noarch
pulp-selinux-2.3.0-0.17.beta.el6sat.noarch
python-ldap-2.3.10-1.el6.x86_64
katello-certs-tools-1.4.4-1.el6sat.noarch
katello-configure-foreman-proxy-1.4.5-10.el6sat.noarch
pulp-rpm-plugins-2.3.0-0.17.beta.el6sat.noarch
pulp-nodes-parent-2.3.0-0.17.beta.el6sat.noarch
pulp-katello-plugins-0.2-1.el6sat.noarch
ruby193-rubygem-net-ldap-0.3.1-3.el6sat.noarch
candlepin-scl-1-5.el6_4.noarch
candlepin-tomcat6-0.8.25-1.el6sam.noarch
signo-katello-0.0.22-2.el6sat.noarch
katello-glue-candlepin-1.4.6-29.el6sat.noarch
katello-selinux-1.4.4-4.el6sat.noarch
katello-1.4.6-29.el6sat.noarch
ruby193-rubygem-ldap_fluff-0.2.2-2.el6sat.noarch
katello-configure-foreman-1.4.5-10.el6sat.noarch
katello-foreman-all-1.4.6-29.el6sat.noarch
Katello-Katello-Configuration-KatelloClient-1.1-53.noarch
candlepin-cert-consumer-ares.usersys.redhat.com-1.0-1.noarch
katello-repos-1.4.2-1.el6.noarch
candlepin-scl-rhino-1.7R3-1.el6_4.noarch
katello-configure-1.4.5-10.el6sat.noarch
pulp-server-2.3.0-0.17.beta.el6sat.noarch
pulp-puppet-plugins-2.3.0-0.17.beta.el6sat.noarch
candlepin-selinux-0.8.25-1.el6sam.noarch
katello-common-1.4.6-29.el6sat.noarch
katello-glue-elasticsearch-1.4.6-29.el6sat.noarch
katello-all-1.4.6-29.el6sat.noarch
katello-candlepin-cert-key-pair-1.0-1.noarch
pulp-rpm-handlers-2.3.0-0.17.beta.el6sat.noarch
Katello-Katello-Installation-HammerCLI-1.0-7.noarch
Katello-Katello-Sanity-ImportKeys-1.2-1.noarch

Comment 7 Bryan Kearney 2014-04-24 17:08:20 UTC
This was verified and delivered with MDP2. Closing it out.