Bug 1229210

Summary: Logging in with restricted user(Automate/Log) gives Authentication failed message
Product: Red Hat CloudForms Management Engine Reporter: Ramesh A <rananda>
Component: UI - OPSAssignee: Milan Zázrivec <mzazrivec>
Status: CLOSED ERRATA QA Contact: Ramesh A <rananda>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.4.0CC: hkataria, jhardy, mpovolny, obarenbo
Target Milestone: GA   
Target Release: 5.6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: rbac
Fixed In Version: 5.6.0.0 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-06-29 14:56:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Restricted user error none

Description Ramesh A 2015-06-08 09:31:50 UTC
Created attachment 1036266 [details]
Restricted user error

Description of problem:
Logging in with restricted user(Automate/Log) gives Authentication failed message

Version-Release number of selected component (if applicable):
5.4.0.5.20150605150206_7daa1a8


How reproducible: 100%


Steps to Reproduce:
1. Create a new role and only give it the Automate => Log permission
2. Add a new group and assign the role to the group
3. Add a new user and assign the used to the group
4. Try to log in as the new user

Actual results:
"The user's role is not authorized for any access, please contact the administrator!" message is displayed.  Refer the screenshot and evm.log for more details


Expected results: 
Logged in and placed on the Automate => Log page.


Additional info:
evm.log:
=======
[----] E, [2015-06-08T05:25:06.523946 #2654:105deac] ERROR -- : MIQ(dashboard_controller-authenticate): The user's role is not authorized for any access, please contact the administrator!

Comment 3 Milan Zázrivec 2015-12-14 14:21:59 UTC
https://github.com/ManageIQ/manageiq/pull/5830

Comment 4 CFME Bot 2015-12-18 16:17:47 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/efe708216fc510d6320b63b6bcb922c0cd2ed65f

commit efe708216fc510d6320b63b6bcb922c0cd2ed65f
Author:     Milan Zazrivec <mzazrivec>
AuthorDate: Mon Dec 14 15:20:13 2015 +0100
Commit:     Milan Zazrivec <mzazrivec>
CommitDate: Mon Dec 14 15:20:13 2015 +0100

    Add Automate -> Log start page
    
    Users who are (via role) allowed to view automate logs only
    will land on this page upon login. Otherwise, these users
    would not be able to log in at all.
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1229210

 db/fixtures/miq_shortcuts.yml | 5 +++++
 1 file changed, 5 insertions(+)

Comment 5 Ramesh A 2016-04-22 14:33:03 UTC
Good to go.  Verified and working fine in 5.6.0.4-beta2.3.20160421172650_719e256

Comment 7 errata-xmlrpc 2016-06-29 14:56:31 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1348