Bug 1245682

Summary: OpenStack tenant visibility not limited by tag
Product: Red Hat CloudForms Management Engine Reporter: Chris Pelland <cpelland>
Component: ProvidersAssignee: Harpreet Kataria <hkataria>
Status: CLOSED ERRATA QA Contact: Pete Savage <psavage>
Severity: high Docs Contact:
Priority: high    
Version: 5.4.0CC: cpelland, dajohnso, eminguez, gblomqui, hkataria, jfrey, jhardy, jkrocil, lsmola, mfeifer, obarenbo, psavage, snansi
Target Milestone: GAKeywords: FutureFeature, ZStream
Target Release: 5.4.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 5.4.2.0 Doc Type: Bug Fix
Doc Text:
In the previous version of CloudForms Management Engine, using tags to limit OpenStack tenant view capabilities for users did not work and the user could see all tenants. This bug was due to new tenant classes not being added to the list of classes that could be used for role based access control (RBAC). This bug was fixed by adding the missing classes to the list of classes that could be used for RBAC. Tenant visibility can be limited by tags in the new version of CloudForms Management Engine.
Story Points: ---
Clone Of: 1235541 Environment:
Last Closed: 2015-09-09 12:25:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1235541    
Bug Blocks:    

Comment 3 CFME Bot 2015-08-06 17:41:22 UTC
New commit detected on cfme/5.4.z:
https://code.engineering.redhat.com/gerrit/gitweb?p=cfme.git;a=commitdiff;h=41a45cf7d41ce0fb8e7094996ea5e5418315001c

commit 41a45cf7d41ce0fb8e7094996ea5e5418315001c
Author:     Harpreet Kataria <hkataria>
AuthorDate: Wed Aug 5 09:21:32 2015 -0400
Commit:     Harpreet Kataria <hkataria>
CommitDate: Wed Aug 5 09:21:32 2015 -0400

    Added missing classes to CLASSES_THAT_PARTICIPATE_IN_RBAC list
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1235541
    https://bugzilla.redhat.com/show_bug.cgi?id=1245682

 vmdb/app/models/rbac.rb | 7 +++++++
 1 file changed, 7 insertions(+)

Comment 4 CFME Bot 2015-08-06 17:41:30 UTC
New commit detected on cfme/5.4.z:
https://code.engineering.redhat.com/gerrit/gitweb?p=cfme.git;a=commitdiff;h=11d5ec0be786e910fffdedee3ad9d31a0e700458

commit 11d5ec0be786e910fffdedee3ad9d31a0e700458
Merge: 8522494 41a45cf
Author:     Dan Clarizio <dclarizi>
AuthorDate: Thu Aug 6 13:36:21 2015 -0400
Commit:     Dan Clarizio <dclarizi>
CommitDate: Thu Aug 6 13:36:21 2015 -0400

    Merge branch '54z_bz_1245682' into '5.4.z'
    
    Added missing classes to CLASSES_THAT_PARTICIPATE_IN_RBAC list
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1235541
    https://bugzilla.redhat.com/show_bug.cgi?id=1245682
    
    @dclarizio please review/merge, clean patch was applied.
    Original PR: https://github.com/ManageIQ/manageiq/pull/3691
    
    See merge request !211

 vmdb/app/models/rbac.rb | 7 +++++++
 1 file changed, 7 insertions(+)

Comment 8 Pete Savage 2015-08-26 12:56:20 UTC
Verified in 5.4.2.0

Comment 10 errata-xmlrpc 2015-09-09 12:25:40 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-1744.html