Bug 1465158

Summary: [RFE] Unable to Utilize Tenancy With Central Admin
Product: Red Hat CloudForms Management Engine Reporter: Saif Ali <saali>
Component: ApplianceAssignee: Libor Pichler <lpichler>
Status: CLOSED CURRENTRELEASE QA Contact: Md Nadeem <mnadeem>
Severity: high Docs Contact:
Priority: medium    
Version: 5.7.0CC: abellott, brant.evans, dmetzger, dscott, hhudgeon, hkataria, jcutter, jhardy, lpichler, mpovolny, ngupta, obarenbo, rspagnol, simaishi, smallamp, swick
Target Milestone: GAKeywords: FutureFeature, TestOnly, ZStream
Target Release: 5.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: central_admin:tenant
Fixed In Version: 5.11.0.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1695631 (view as bug list) Environment:
Last Closed: 2019-12-13 15:16:09 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: Feature
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1692488, 1695631    

Description Saif Ali 2017-06-26 20:05:54 UTC
Description of problem:
Tenants created in subordinate regions are not visible in the global region.  This effectively prevents us from being able to enforce any access restrictions or tenancy from the global region.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Deploy a subordinate CloudForms Region
2. Configure a child tenant in the subordinate region
3. Create a group mapped to the child tenant with a role capable of Service Catalog Provisioning
4. Add a catalog item to the root tenant of the subordinate region.
5. Observe the child tenant of the subordinate region is able to see the catalog item (via group/role relationship) and deploy the catalog item.
6. Create a global CloudForms Region
7. Configure global replication on the Global region
8. Enable central admin
9. Observe that the catalog item created in the root tenant of the subordinate region is replicated to the root tenant of the global region.
10. Observe that the child tenant from the subordinate region is not visible in Global region.
11. Add a new child tenant to the Global region
12.Create a group mapped to the child tenant in the global region with a role capable of Service Catalog Provisioning
13. Observe that the child tenant in the Global region does not inherit the replicated catalog from the subordinate region

Actual results:


Expected results:


Additional info: