Bug 1223460

Summary: Improve gnome-software on 'managed' systems
Product: Red Hat Enterprise Linux 7 Reporter: Matthias Clasen <mclasen>
Component: gnome-packagekitAssignee: Richard Hughes <rhughes>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.2CC: klember, mboisver, tpelka
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-11-19 09:18:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1184203    
Attachments:
Description Flags
incomplete patch none

Description Matthias Clasen 2015-05-20 14:47:38 UTC
If a user is not allowed to install update because the system is 'managed', we should not show him update lists and an 'restart and install' button - he can't use it.

Just to clarify: this is different from a totally locked down system, where gnome-software should just not be installed. Here, the user is still expected to use gnome-software for finding and installing applications, but the updates are centrally managed.

Comment 1 Matthias Clasen 2015-05-20 14:48:32 UTC
This is really a gnome-software bug, but it doesn't have a bz component yet, so filing against gnome-packagekit for now.

Comment 2 Matthias Clasen 2015-05-20 15:17:22 UTC
Another thing to look at in this context is software sources - if the polkit privileges are missing to change repositories, we shouldn't offer the big red remove button.

Comment 3 Matthias Clasen 2015-05-21 22:04:08 UTC
Created attachment 1028452 [details]
incomplete patch

Here is a quick proof-of-concept.

To try it, UPDATES_ARE_MANAGED=1 ./gnome-software (after killing your session service). Also try UPDATES_ARE_MANAGED=1 ./gnome-software --mode=updates

Still tbd: How do we determine if the system is managed - look at polkit privileges, add a separate setting, something else ?

Comment 4 Matthias Clasen 2015-05-27 20:36:40 UTC
More complete patch in the upstream bug

Comment 5 Kalev Lember 2015-07-08 09:46:36 UTC
We backported the patch to gnome-software 3.14.6 which is the version included in the rebase errata.

Comment 8 errata-xmlrpc 2015-11-19 09:18:08 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2015-2139.html