Bug 1395395

Summary: [RFE] Access to jobs monitor to a non-privileged user
Product: Red Hat Satellite Reporter: Preetesh Sharma <prsharma>
Component: Users & RolesAssignee: satellite6-bugs <satellite6-bugs>
Status: CLOSED NOTABUG QA Contact: Katello QA List <katello-qa-list>
Severity: high Docs Contact:
Priority: high    
Version: 6.2.1CC: bkearney, dhlavacd, mhulan, prsharma
Target Milestone: UnspecifiedKeywords: FutureFeature
Target Release: Unused   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-18 09:32:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Preetesh Sharma 2016-11-15 21:53:03 UTC
1. Proposed title of this feature request  
   Access to jobs monitor to a non-privileged user
   
2. What is the nature and description of the request?
   A non-admin user, once granted remote-execution privilege, should be able to monitor their submitted jobs easily. Once you have thousands of machines and you submit a job to a few hundreds, checking the job status of each one is not acceptable. Satellite should provide an easy way to get the job status for any user, administrator or not.
      
3. Why do you need this? (List the business requirements here)
   Not all users are administrators. Non-admin users should have an easy way to monitor and get their jobs report. On an Enterprise environment upper-mgmt expect such reports from their subordinates.
   
5. How would you like to achieve this? (List the functional requirements here)  
   Have a role for the functionality and filters for a custom roles.
   
6. For each functional requirement listed, specify how Red Hat and you can  test to confirm the requirement is successfully implemented. 
   Assign the role to a non admin user and select  'Monitor > Jobs'. You should be able to see the jobs.

7. Does you have any specific timeline dependencies and which release would they like to target (i.e. RHEL6, RHEL7)?  

8. List any affected packages or components.
   Satellite 6.2.x
      
9. Would you be able to assist in testing this functionality if implemented?"
   Yes.

Comment 1 Marek Hulan 2016-11-16 15:55:21 UTC
Preetesh, I'm unable to reproduce on 6.2.3. Please make sure that user has been granted "Remote Execution User" role. Users with this role can see Monitor -> Jobs link and can go to specific job invocation where they can see aggregated status for this job (the big chart, details re in Hosts tab). Note that the role contains all required permissions for user to be able to run jobs and see their status. Customers can clone the role if they need to lock it down more.

If customer still see this issue, please obtain production.log with debug log level while the user tries to access Monitor -> Jobs or if he can't see this link, then the same log but from when the user logs in.

Comment 4 Preetesh Sharma 2016-11-16 19:15:23 UTC
Hi Marek,

Thank you for the information I can see "Monitor Jobs" after adding "Remote Execution User" Role. You can close this RFE.

Thank you for your help.

Preetesh