Bug 1190603

Summary: RBAC:Requester pull down shows all the users and not the current user.
Product: Red Hat CloudForms Management Engine Reporter: Aziza Karol <akarol>
Component: UI - OPSAssignee: Brian McLaughlin <bmclaugh>
Status: CLOSED ERRATA QA Contact: Aziza Karol <akarol>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.3.0CC: jhardy, obarenbo, xlecauch
Target Milestone: GA   
Target Release: 5.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 5.4.0.0.11 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1194325 (view as bug list) Environment:
Last Closed: 2015-06-16 12:49:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1194325    
Attachments:
Description Flags
snpshot none

Description Aziza Karol 2015-02-09 09:25:10 UTC
Created attachment 989590 [details]
snpshot

Description of problem:


Version-Release number of selected component (if applicable):
5.3.3.0.1.20150127115148_446974b 

How reproducible:
100%

Steps to Reproduce:
see attached screenshot.
I have logged in as a user with "user" role.
In the Services -> Requests view, the requesters pull-down list is not showing the current user, but instead displaying users whose requests the current user did not have permissions to view. 

Actual results:


Expected results:
Requester pull down should show only the current user.

Additional info:

Comment 3 Aziza Karol 2015-02-13 12:19:49 UTC
This issue exists in 5.3.0/1/2

This issue is similar to https://bugzilla.redhat.com/show_bug.cgi?id=983744

Comment 4 CFME Bot 2015-02-18 22:55:50 UTC
New commit detected on manageiq/master:
https://github.com/ManageIQ/manageiq/commit/697ce1177f033f71c3f5da5f1bcf26e3b9e129c2

commit 697ce1177f033f71c3f5da5f1bcf26e3b9e129c2
Author:     Brian McLaughlin <bmclaugh>
AuthorDate: Wed Feb 18 14:40:35 2015 -0500
Commit:     Brian McLaughlin <bmclaugh>
CommitDate: Wed Feb 18 14:42:06 2015 -0500

    Limit non-approver requester pulldown to current user
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1190603

 vmdb/app/controllers/miq_request_controller.rb | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

Comment 5 CFME Bot 2015-02-18 22:55:53 UTC
New commit detected on manageiq/master:
https://github.com/ManageIQ/manageiq/commit/d8ad57cd70fa28c8c7e7342c08856b9b523ee78a

commit d8ad57cd70fa28c8c7e7342c08856b9b523ee78a
Author:     Brian McLaughlin <bmclaugh>
AuthorDate: Wed Feb 18 15:21:15 2015 -0500
Commit:     Brian McLaughlin <bmclaugh>
CommitDate: Wed Feb 18 15:21:15 2015 -0500

    Hash#has_value? is deprecated in favor of Hash#value?
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1190603

 vmdb/app/controllers/miq_request_controller.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comment 7 Aziza Karol 2015-03-12 11:48:13 UTC
Requester pull down shows the current user.

Verified:
5.4.0.0.11.20150309201930_8b6a235

Comment 9 errata-xmlrpc 2015-06-16 12:49:56 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1100.html