Bug 1306813

Summary:	[RFE] SSUI: Allow users to change groups like they do in the OPS UI
Product:	Red Hat CloudForms Management Engine	Reporter:	Dan Clarizio <dclarizi>
Component:	UI - OPS	Assignee:	Martin Hradil <mhradil>
Status:	CLOSED ERRATA	QA Contact:	Shveta <sshveta>
Severity:	high	Docs Contact:
Priority:	high
Version:	5.5.0	CC:	cpelland, dajohnso, hkataria, jhardy, jprause, mfeifer, mhradil, mpovolny, obarenbo, snansi, sshveta
Target Milestone:	GA	Keywords:	FutureFeature, ZStream
Target Release:	5.5.3
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	5.5.3.2	Doc Type:	Enhancement
Doc Text:	The self service user interface in the new version of Red Hat CloudForms Management Engine adds the ability to allow users to switch groups. This allows users of the self service user interface to get behaviour and privileges assigned to different groups.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-04-13 18:43:48 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Dan Clarizio 2016-02-11 18:52:40 UTC

Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 5 Shveta 2016-03-29 18:36:40 UTC

Doesn't work in 5.5.3.2 .
Tested RBAC on upstream . works there

Comment 7 Martin Hradil 2016-03-31 08:09:00 UTC

Shveta, please provide more info that "doesn't work".

But.. I'm pretty sure it works, tried on 5.5.3.2 with the cloudqe LDAP, test-user3 indeed can see a group switcher and can switch groups (see the attached screenshot)

Comment 8 Shveta 2016-03-31 15:11:02 UTC

Martin , I looked for access control or group switcher in Self service UI and couldn't locate it .

Can you please tell me the steps . I need to add a LDAP account first ?

Comment 9 Martin Hradil 2016-03-31 15:13:36 UTC

Shveta, sure.. the server has to be set to authenticate against LDAP, with the "Get User Groups from LDAP" checkbox checked - and the ldap user needs to actually be a member of multiple groups.

Comment 10 Shveta 2016-03-31 16:52:43 UTC

Martin , can you tell me how to make a user member of multiple groups.
In access control , i see that we can assign only one group to a user .

Comment 11 Dan Clarizio 2016-03-31 17:50:02 UTC

Shveta, you have to have your LDAP user assigned to multiple LDAP groups that map to the groups in MIQ/CFME.  You can not currently assign a user to multiple groups using the internal database authentication.

Comment 12 Shveta 2016-03-31 21:34:48 UTC

Able to switch groups for user belonging to multiple groups.

Verified in 5.5.3.2.20160318152106_92d2d67

Comment 14 errata-xmlrpc 2016-04-13 18:43:48 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:0616