Bug 1117832

Summary: Filter creation allows me to enter and save with a field that isn't available for searching and blows up the resulting entity page
Product: Red Hat Satellite Reporter: Bryan Kearney <bkearney>
Component: ProvisioningAssignee: Dmitri Dolguikh <ddolguik>
Status: CLOSED CURRENTRELEASE QA Contact: Tazim Kolhar <tkolhar>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.0.4CC: cwelton, jmontleo, tkolhar
Target Milestone: Unspecified   
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
URL: http://projects.theforeman.org/issues/5235
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-11 12:21:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Bryan Kearney 2014-07-09 13:28:03 UTC
1. Create a New Role
2. Click to add new Filter
3. Select 'Domain'
4. Add all permissions for Domain
5. Enter 'anything = 4' into the Search box
6. click 'Submit' (Note: no validation to stop you from saving this invalid filter)
7. Grant Role to user without any other permissions
8. Log in as new user
9. Navigate to Domains page
10. Attempt to create a Domain

Error output "Invalid search query: Field 'anything' not recognized for searching!"

Comment 1 Bryan Kearney 2014-07-09 13:28:03 UTC
Created from redmine issue http://projects.theforeman.org/issues/5235

Comment 2 Bryan Kearney 2014-07-09 13:28:05 UTC
Upstream bug assigned to ddolguik

Comment 4 Bryan Kearney 2014-07-09 13:47:40 UTC
Moving to POST since upstream bug http://projects.theforeman.org/issues/5235 has been closed
-------------
Dmitri Dolguikh
PR: https://github.com/theforeman/foreman/pull/1552
-------------
Anonymous
Applied in changeset commit:0545fd10e610f350e1b43783d3073ab2296bdf33.

Comment 7 Tazim Kolhar 2014-08-20 05:45:10 UTC
VERIFIED

Filter only allows valid permissions to be added

Comment 8 Bryan Kearney 2014-09-11 12:21:20 UTC
This was delivered with Satellite 6.0 which was released on 10 September 2014.