Bug 1382031

Summary: [RFE] Role / permissions for access to subscriptions feature
Product: Red Hat Satellite Reporter: Preetesh Sharma <prsharma>
Component: Users & RolesAssignee: satellite6-bugs <satellite6-bugs>
Status: CLOSED DUPLICATE QA Contact: Katello QA List <katello-qa-list>
Severity: high Docs Contact:
Priority: high    
Version: 6.2.1CC: bbuckingham, bkearney, jcallaha, mhulan, prsharma
Target Milestone: UnspecifiedKeywords: FutureFeature, Triaged
Target Release: Unused   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-22 09:33:11 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Preetesh Sharma 2016-10-05 14:42:38 UTC
1. Proposed title of this feature request  
Role / permissions for access to subscriptions feature
      
2. What is the nature and description of the request?  
I wish to permit non admin users to view and manage subscriptions via satellite 6. 
The 'subscription role' would be a non 'sysadmin role', in that I would not want that user to be able to access remote execution / shutdown / apply errata etc
      
3. Why do you need this? (List the business requirements here)
As above, segregation of duties. I dont want everyone to be a full admin

5. How would you like to achieve this? (List the functional requirements here)  
Its just permissions / role
      
6.  For each functional requirement listed, specify how Red Hat and you can  test to confirm the requirement is successfully implemented.  
A non admin user can view / manage subscriptions. At present a HTTP 404 code is returned when a non-admin user tries to view subscriptions via 'Content -> RedHat subscriptions'

7. Does you have any specific timeline dependencies and which release would they like to target (i.e. RHEL6, RHEL7)?  
No

8. List any affected packages or components.
Satellite 6.2.2
 
9. Would you be able to assist in testing this functionality if implemented?"
Yes

Comment 1 Marek Hulan 2016-11-09 11:18:53 UTC
Preetesh, could you please double-check you don't see view_subscriptions permission for Organization resource type when you create new filter? The permission is there I believe, at least I can see it in 6.2.3. Note there is a separate issue (bz 1333219) with this permission so it might not work even if you grant it to user, but this BZ asks for adding such permission so if you can find it there, I think this BZ can be closed.

Also I don't see any sensitive information in the report, please make the BZ public so everyone can see it.

Comment 3 Marek Hulan 2016-11-22 09:33:11 UTC

*** This bug has been marked as a duplicate of bug 1333219 ***