Bug 1399216

Summary: giving access to view the quota of a tenant but not listing still allows a user to list all tenants
Product: Red Hat CloudForms Management Engine Reporter: Satoe Imaishi <simaishi>
Component: ApplianceAssignee: Libor Pichler <lpichler>
Status: CLOSED ERRATA QA Contact: Pavol Kotvan <pakotvan>
Severity: high Docs Contact:
Priority: high    
Version: 5.5.0CC: abellott, cpelland, fdewaley, jhardy, lpichler, obarenbo, simaishi
Target Milestone: GAKeywords: ZStream
Target Release: 5.7.1   
Hardware: All   
OS: All   
Whiteboard: cfme_tenant:quota
Fixed In Version: 5.7.1.0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1342600 Environment:
Last Closed: 2017-02-27 19:25:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1342600    
Bug Blocks:    

Comment 2 CFME Bot 2017-01-06 19:25:44 UTC 
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/865b8633defbdfa4b80f214b78a4d53d5f26dcaa

commit 865b8633defbdfa4b80f214b78a4d53d5f26dcaa
Author:     Milan Zázrivec <mzazrivec>
AuthorDate: Fri Nov 25 13:05:51 2016 +0100
Commit:     Satoe Imaishi <simaishi>
CommitDate: Fri Jan 6 14:20:38 2017 -0500

    Merge pull request #12844 from lpichler/remove_list_and_show_from_miq_features
    
    Remove show and list permission from MiqProductFeatures for Tenants
    (cherry picked from commit f90be9b1967efebbc737c1121e6f61ac8552feb0)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1399216

 app/presenters/tree_builder_ops_rbac.rb     | 2 +-
 app/views/ops/_rbac_group_details.html.haml | 2 +-
 config/api.yml                              | 6 +++---
 db/fixtures/miq_product_features.yml        | 9 ---------
 spec/requests/api/collections_spec.rb       | 4 ++--
 5 files changed, 7 insertions(+), 16 deletions(-)
Comment 3 Libor Pichler 2017-01-09 04:27:29 UTC 
https://github.com/ManageIQ/manageiq/pull/12844#event-871253611
Comment 6 errata-xmlrpc 2017-02-27 19:25:19 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2017-0320.html