Bug 1249071

Summary:	Adding an acl permission defined by non-existent id to a role needs better error message
Product:	Red Hat Enterprise Linux 7	Reporter:	Miroslav Lisik <mlisik>
Component:	pcs	Assignee:	Chris Feist <cfeist>
Status:	CLOSED DUPLICATE	QA Contact:	cluster-qe <cluster-qe>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.1	CC:	cluster-maint, tojeline
Target Milestone:	rc
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-13 12:32:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Miroslav Lisik 2015-07-31 12:52:39 UTC

Description of problem:
If you try to add an acl permission defined by non-existent id to a role, an invalid cib report is produced instead of a proper error message.

Version-Release number of selected component (if applicable):
pcs-0.9.137-13.el7_1.3.x86_64
pcs-0.9.142-2.el7.x86_64

How reproducible:
always


Steps to Reproduce:
1) Run command:
# pcs acl permission add test-role read id non-existent-id

> Id 'non-existend-id' must not be defined in cib xml.


Actual results:

Error: Unable to update cib
Call cib_replace failed (-203): Update does not conform to the configured schema
...
> Long cib report truncated


Expected results:

Error: unable to find id: non-existent-id

Comment 4 Tomas Jelinek 2015-11-13 12:32:04 UTC


*** This bug has been marked as a duplicate of bug 1248990 ***