Bug 1399725
| Summary: | Standard user is unable to access "Red Hat Subscriptions" page | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Harshad More <hmore> | ||||||
| Component: | Subscription Management | Assignee: | David Davis <daviddavis> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Bruno Rocha <rochacbruno> | ||||||
| Severity: | medium | Docs Contact: | |||||||
| Priority: | medium | ||||||||
| Version: | 6.2.3 | CC: | ahumbe, aperotti, bbuckingham, daviddavis, dhlavacd, dlezzoum, jcallaha, mmccune, rochacbruno, tomckay, walden | ||||||
| Target Milestone: | Unspecified | Keywords: | PrioBumpField, Triaged | ||||||
| Target Release: | Unused | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Linux | ||||||||
| URL: | http://projects.theforeman.org/issues/17757 | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | rubygem-katello-3.0.0.134-1 | Doc Type: | If docs needed, set a value | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | |||||||||
| : | 1446724 (view as bug list) | Environment: | |||||||
| Last Closed: | 2017-06-20 17:21:52 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Bug Depends On: | |||||||||
| Bug Blocks: | 1399395 | ||||||||
| Attachments: |
|
||||||||
|
Description
Harshad More
2016-11-29 15:42:47 UTC
Created redmine issue http://projects.theforeman.org/issues/17757 from this bug I was not able to reproduce this error on 6.2.8 using the reproduce steps. Using the steps listed, I could view the subscriptions page fine with the test user. However, when I attempted to visit the subscriptions page with a user that did not have subs view permission, I encountered the error. It looks like there is an open issue around rendering the 403 page: http://projects.theforeman.org/issues/15943 I was able to reproduce this finally. It's a bit different BZ #1333219. The key is you must NOT have a manifest imported. The error occurs because the readonly user is redirected to edit manifests if there are no subscriptions: https://github.com/Katello/katello/blob/241d6aacf3df7564d0676d774afe1fe077c2b772/engines/bastion_katello/app/assets/javascripts/bastion_katello/subscriptions/subscriptions.controller.js#L67-L69 And of course they don't have edit permissions so you hit a 403. What we probably want to do is to only transition to manifest import if the user has the 'import_manifest' permission. Upstream bug assigned to daviddavis Upstream bug assigned to daviddavis Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/17757 has been resolved. Upstream PR: https://github.com/Katello/katello/pull/6658 Very small fix. Minimal impact. I recommend we get this into next 6.2 z-stream. Thank you David ! QE: Note comment #5. To recap, steps to reproduce: 0. On a system or in a org with NO MANIFEST 1. Create a user with view only role 2. Login as the user and go to the subscriptions page Actual results: Will get error on screen -- "We're sorry, but something went wrong." Expected results: User should be able to see subscription page Created attachment 1283680 [details]
verification:ok
Verified in satellite-6.2.10-2.0.el7sat.noarch
Working fine for standard non-admin user with only the Viewer role.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1553 |