Bug 1193484

Summary: Roles added to project are ignored by BC.
Product: [Retired] JBoss BPMS Platform 6 Reporter: Marek Baluch <mbaluch>
Component: Business CentralAssignee: manstis
Status: CLOSED EOL QA Contact: Lukáš Petrovický <lpetrovi>
Severity: high Docs Contact:
Priority: high    
Version: 6.1.0CC: etirelli, kverlaen, rrajasek
Target Milestone: CR2   
Target Release: 6.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-27 19:46:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Marek Baluch 2015-02-17 12:55:48 UTC
*** Description of problem

After the following action project "test-project" will still be visible to a user with role "analyst" and/or "admin".

>>Please enter command (type help to see available commands): 
add-role-project
>>Repository alias:test-repository
>>Select project:
1) test-project
1
>>Security roles (comma separated list):developer
Result:
Role developer added successfully to project test-project

>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>Please enter command (type help to see available commands): 
push-changes
Result:
Pushed successfully
>>>>>>>>>>>>>>>>>>>>>>>>>>>


*** Additional info
Other add-role-XYZ commands hide either OU or a repository.

Comment 1 Kris Verlaenen 2015-02-17 14:44:40 UTC
Recommending we would revisit this for 6.2.  Project-level roles are less common than repo-level roles.  This might not be trivial to fix (this late in the cycle), and for 6.2 with the asset mgmt feature, by default we'd move to 1 project = 1 repo anyway.

Comment 11 Pavel Kralik 2015-12-03 14:12:01 UTC
BPMS6.2.0.CR2/EAP 6.4
1) used kie-config-cli.sh to add-group-project on repository1 for project1 to developer
2) created a drl1 on the project1 with package org.kie.example.project1
3) users with role analyst/admin cannot access project1/drl1 and cannot create assets on project1