Bug 1343591

Summary: [GSS](6.4.z) setting system properties on a server-group fails when using RBAC scoped roles on admin console
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Lei Yu <leiyu>
Component: Web ConsoleAssignee: Miroslav Sochurek <msochure>
Status: CLOSED CURRENTRELEASE QA Contact: Pavel Jelinek <pjelinek>
Severity: low Docs Contact:
Priority: low    
Version: 6.4.8CC: bmaxwell, hbraun, hpehl, jkudrnac, jtruhlar, mcada, msochure, pjelinek, ppalaga
Target Milestone: CR1   
Target Release: EAP 6.4.12   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1352049 (view as bug list) Environment:
Last Closed: 2017-01-17 13:16:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1352049    
Bug Blocks: 1323582, 1375585    

Description Lei Yu 2016-06-07 14:07:01 UTC
New installation EAP 6.4.8, set up domain mode and necessary security realm, ManagementRealm

Enable RBAC

/core-service=management/access=authorization:write-attribute(name=provider,value=rbac)

Add scoped role:

/core-service=management/access=authorization/server-group-scoped-role=DeployerIntegration:add(base-role=Administrator,server-groups=[main-server-group])
/core-service=management/access=authorization/role-mapping=DeployerIntegration:add()
/core-service=management/access=authorization/role-mapping=DeployerIntegration/include=user1:add(name=user1,realm=ManagementRealm,type=USER)

User1 added above cannot edit the system properties of the server group on the group configuration page via admin console, the "add" and "remove" button are not visible to the user.

I have tested EAP 6.4.0, EAP 6.4.8, Wildfly 10 and EAP 7, the bug only exist in EAP 6.4.x.

Comment 2 JBoss JIRA Server 2016-06-21 10:15:20 UTC
Martin Šmérek <msmerek> updated the status of jira HAL-1125 to Coding In Progress

Comment 3 JBoss JIRA Server 2016-06-23 10:15:58 UTC
Martin Šmérek <msmerek> updated the status of jira JBEAP-5065 to Coding In Progress

Comment 5 Martin Šmérek 2016-07-04 07:13:26 UTC
PR: https://github.com/hal/ballroom/pull/11

Comment 6 JBoss JIRA Server 2016-07-12 12:37:56 UTC
Harald Pehl <hpehl> updated the status of jira HAL-1125 to Resolved

Comment 7 Harald Pehl 2016-07-12 12:40:47 UTC
Merged upstream: 
Upgrade Ballroom version in HAL 2.1.x to 2.1.11.Final
https://github.com/hal/core/commit/a495162ed9da7e7ec8dcda4d4ebc8c4cac6b46e3

Comment 9 JBoss JIRA Server 2016-10-19 11:15:00 UTC
Peter Palaga <ppalaga> updated the status of jira JBEAP-6479 to Coding In Progress

Comment 10 JBoss JIRA Server 2016-10-19 11:21:22 UTC
Peter Palaga <ppalaga> updated the status of jira JBEAP-6479 to Resolved

Comment 11 Michael Cada 2016-11-05 11:58:17 UTC
Verified with EAP 6.4.12.CP.CR1

Comment 12 Petr Penicka 2017-01-17 13:16:30 UTC
Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.