Bug 1387572

Summary:	Provider under catalog item visible for a user who don't to have a permission for viewing a provider
Product:	Red Hat CloudForms Management Engine	Reporter:	Gellert Kis <gekis>
Component:	Appliance	Assignee:	Libor Pichler <lpichler>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Landon LaSmith <llasmith>
Severity:	medium	Docs Contact:
Priority:	high
Version:	5.6.0	CC:	abellott, dajohnso, jhardy, jprause, jrafanie, kseifried, lpichler, obarenbo, simaishi, smallamp
Target Milestone:	GA	Keywords:	TestOnly, ZStream
Target Release:	5.8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	rbac:catalog
Fixed In Version:	5.8.0.0	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1414012 (view as bug list)		Environment:
Last Closed:	2017-06-12 17:28:27 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	1414012

Description Gellert Kis 2016-10-21 10:04:57 UTC

Description of problem:

symptom in lab that we have 2 azure provider . For a group (user) , only one is visible under compute/cloud/providers. 
When new  Catalog Item with Type : orchestration is created , 
and 
 Catalog : Azure  / Dialog : Azure SQL server / Orchestration Template : Azure Windows xxxxx
(you can see in the reproducer) 
Then both provider is visible. 


Version-Release number of selected component (if applicable):

Version is 5.6.2.1.20160922130607_92d5b5e

How reproducible:
in my reproducer environment . 


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 9 Sudhir Mallamprabhakara 2017-05-01 19:10:15 UTC

Landon - Please talk to Shwetha for more info on this.

- Sudhir

Comment 10 Landon LaSmith 2017-05-03 18:17:22 UTC

VERFIED in 5.8.0.13-rc2.20170502165848_0f98658

I created two separate tenants,roles,groups and users. Under each user, I added an azure provider which was not visible to the other user. When I created a new Catalog Item with a type of "Orchestration" and an "Orchestration Template" from azure only the visible provider was available.  

These above steps were VERFIED in 5.7.2.1.20170406142927_0a1ad0e.