Bug 1481859

Summary: Provisions via Users in multiple groups in tenants in SSUI result in VMs being provisioned to wrong group/tenant
Product: Red Hat CloudForms Management Engine Reporter: Satoe Imaishi <simaishi>
Component: ProvisioningAssignee: Lucy Fu <lufu>
Status: CLOSED ERRATA QA Contact: Shveta <sshveta>
Severity: high Docs Contact:
Priority: high    
Version: 5.7.0CC: cpelland, dclarizi, gmccullo, jhardy, myoder, obarenbo, simaishi
Target Milestone: GAKeywords: ZStream
Target Release: 5.7.4   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 5.7.4.0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1467364 Environment:
Last Closed: 2017-12-18 20:28:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On: 1467364    
Bug Blocks:    

Comment 2 CFME Bot 2017-08-15 21:56:01 UTC
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/c1c84e85f14677674001e2c15d245a0afbc4cad9

commit c1c84e85f14677674001e2c15d245a0afbc4cad9
Author:     Greg McCullough <gmccullo>
AuthorDate: Wed Aug 2 17:07:40 2017 -0400
Commit:     Satoe Imaishi <simaishi>
CommitDate: Tue Aug 15 17:53:04 2017 -0400

    Merge pull request #15696 from lfu/service_user_in_groups_1467364
    
    Set user's group to the requester group.
    (cherry picked from commit 1d2c55f08a65a895059415cd829990c5c2db5f74)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1481859

 app/models/mixins/miq_request_mixin.rb |  4 +++-
 spec/models/miq_request_spec.rb        | 20 ++++++++++++++++++++
 2 files changed, 23 insertions(+), 1 deletion(-)

Comment 3 CFME Bot 2017-08-15 22:10:56 UTC
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/eea7b864c36f4cb1dadc87043bc2c8844c48c4db

commit eea7b864c36f4cb1dadc87043bc2c8844c48c4db
Author:     Greg McCullough <gmccullo>
AuthorDate: Wed Aug 9 17:01:12 2017 -0400
Commit:     Satoe Imaishi <simaishi>
CommitDate: Tue Aug 15 18:08:41 2017 -0400

    Merge pull request #61 from lfu/service_user_in_groups_1467364
    
    Need to pass the user's group in to automate when the provision starts.
    (cherry picked from commit 8de13ba4c7413710e4481cd7484b3675a12bd517)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1481859

 lib/miq_automation_engine/engine/miq_ae_engine.rb    |  6 ++++--
 lib/miq_automation_engine/engine/miq_ae_object.rb    |  2 +-
 spec/lib/miq_automation_engine/miq_ae_engine_spec.rb | 17 ++++++++++++++++-
 3 files changed, 21 insertions(+), 4 deletions(-)

Comment 4 CFME Bot 2017-08-15 22:26:15 UTC
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/dc9a8adbfc2fc6a0a0b5209103f13e7f5c1b4efa

commit dc9a8adbfc2fc6a0a0b5209103f13e7f5c1b4efa
Author:     Greg McCullough <gmccullo>
AuthorDate: Wed Aug 9 17:02:43 2017 -0400
Commit:     Satoe Imaishi <simaishi>
CommitDate: Tue Aug 15 18:20:55 2017 -0400

    Merge pull request #15760 from lfu/service_user_in_groups_1467364_2
    
    miq_group_id is required by automate.
    (cherry picked from commit 2fe7cd55211866217cf4c0c1c23687e1372d4008)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1481859

 app/models/automation_task.rb       |  2 ++
 spec/models/automation_task_spec.rb | 15 ++++++++++-----
 2 files changed, 12 insertions(+), 5 deletions(-)

Comment 5 Shveta 2017-10-25 20:23:51 UTC
1) Configured LDAP on CFME.
2) Created three groups in CFME group1 , group2 , group 3.
3) Assigned above roles to EVM_Administrator role so that provisioning is enabled.
4) Assigned LDAP user test-suer1 to these groups one by one .
5) Logged in as this user with one group at a time in OPS UI and SSUI .
6) Provisioned service , service was provisioned correctly in each group .
And request did not disappear.


Verified in 5.7.4.0.20170913182424_63a1e18

Comment 8 errata-xmlrpc 2017-12-18 20:28:28 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3484