| Summary: | Signing out from Admin or User portal (RHV-M) navigates to Overview page instead of the Login page. | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Virtualization Manager | Reporter: | Bimal Chollera <bcholler> |
| Component: | ovirt-engine | Assignee: | Nobody <nobody> |
| Status: | CLOSED WONTFIX | QA Contact: | Lucie Leistnerova <lleistne> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.0.2 | CC: | audgiri, bcholler, cnagarka, gklein, lsurette, lsvaty, mgoldboi, michal.skrivanek, mperina, oourfali, rbalakri, Rhev-m-bugs, rnori, srevivo, ykaul |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-11-27 10:14:43 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Infra | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Bimal Chollera
2016-11-07 22:29:39 UTC
(In reply to Bimal Chollera from comment #0) > Description of problem: > > Signing out from Admin or User portal (RHV-M) navigates to Overview page > instead of the Login page. > > Version-Release number of selected component (if applicable): > > RHEV-M Version: rhevm-4.0.2.7-0.1.el7ev.noarch > > How reproducible: > 100% > > Steps to Reproduce: > 1. RHV-M GUI - login as Admin user. > 2. On upper right corner, click on the user and Sign Out > 3. You will land on the RHV Overview page instead of the Login page. > > Actual results: > > Signing out from Admin or User portal (RHV-M) navigates to Overview page > instead of the Login page. > > Expected results: > > Signing out from Admin or User portal (RHV-M) should navigate to Login page. > > Additional info: The current flow seems logical to me, what is the problem the customer is having with the current mechanism. This is not a bug, but a part of engine SSO feature. Login page is just a temporary page which is displayed when unauthenticated user is trying to access protected resource (like webadmin or userportal). Also in 4.0 you are logging to engine itself and not independently to webadmin or userportal, so after logout we redirect to home page (when logging out we don't know which protected resource will user try to access after logout). So from engineering point of view I'm going to close this as NOTABUG? From the QA side I agree with a customer. See scenario: My users are logging in to user portal where they have access rights, though non of them are admins suitable for webadmin. I provide url to user portal for them: https://example.com/ovirt-engine/userportal which will redirect him to SSO. When he logs in and unlog he will be redirected to home page which he has never seen before. Posted a patch to fix the issue. Tested login and logout flows. Following single sign on mechanism integration in the system. the logout behavior has changed a bit from previous version. changing the flow back to the original behavior is considered a big code change at this moment and as well risk to stability for a relative small benefit (no functional aspect or bug in the product). therefor i'm going to close this bug as won't fix. in the case we see this issue is bothering more customers, we'll reexamine the approach here. |