Bug 1342600

Summary:	giving access to view the quota of a tenant but not listing still allows a user to list all tenants
Product:	Red Hat CloudForms Management Engine	Reporter:	Felix Dewaleyne <fdewaley>
Component:	Appliance	Assignee:	Libor Pichler <lpichler>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Pavol Kotvan <pakotvan>
Severity:	high	Docs Contact:
Priority:	high
Version:	5.5.0	CC:	abellott, cpelland, fdewaley, jhardy, lpichler, obarenbo, simaishi
Target Milestone:	GA	Keywords:	TestOnly, ZStream
Target Release:	5.8.0
Hardware:	All
OS:	All
Whiteboard:	cfme_tenant:quota
Fixed In Version:	5.8.0.0	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1399216 (view as bug list)		Environment:
Last Closed:	2017-06-12 17:36:27 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1399216

Description Felix Dewaleyne 2016-06-03 16:05:09 UTC

Description of problem:
giving access to view the quota of a tenant but not listing still allows a user to list all tenants

Version-Release number of selected component (if applicable):
5.5.4.

How reproducible:
all the time

Steps to Reproduce:
1. create a set of sub tenants to the main tenants
2. create a user and assign him to one of the subtenants
3. allow him "configure > configuration > access control > tenants > show  (and not list)

Actual results:
user is able to see all tenants instead of hjust his own and the status of it

Expected results:
user is able to see the status of his tenant but not the others

Additional info: