Bug 1492155

Summary: User unable to login when role permissions restricted to Everything->Settings
Product: Red Hat CloudForms Management Engine Reporter: Landon LaSmith <llasmith>
Component: UI - OPSAssignee: Greg Piatigorski <gpiatigo>
Status: CLOSED CURRENTRELEASE QA Contact: Landon LaSmith <llasmith>
Severity: high Docs Contact:
Priority: high    
Version: 5.8.0CC: dclarizi, hkataria, jhardy, lavenel, llasmith, mpovolny, obarenbo, simaishi, smallamp
Target Milestone: GAKeywords: TestOnly, ZStream
Target Release: 5.9.0   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: 5.9.0.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1497209 (view as bug list) Environment:
Last Closed: 2018-03-06 15:33:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: Bug
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1497209    

Description Landon LaSmith 2017-09-15 15:48:27 UTC
Description of problem: A user account is unable to login with their designated role only has access to viewing tasks (Everything -> Settings -> Tasks -> View). 

Attempts to login are denied with the message "The user's role is not authorized for any access, please contact the administrator!"


Version: 5.8.2.0 (Works in 5.7.4 and 5.8.1.5)


How reproducible: 100%


Steps to Reproduce:
1. Create a new role that only has access to the product features: Everything->Settings
2. Create a group with the assigned role
3. Create a user in the previously created group/role
4. Attempt to login as the restricted user

Actual results: Attempts to login return "The user's role is not authorized for any access, please contact the administrator!"


Expected results: Login is allowed


Additional info: Login requires enabling any other product features (other than Access Rules for all Virtual Machines)

Comment 11 CFME Bot 2017-09-28 14:06:36 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/97f88f04f7968a35d23b27e1fab6890e4fc0758b

commit 97f88f04f7968a35d23b27e1fab6890e4fc0758b
Author:     Greg Piatigorski <gpiatigo>
AuthorDate: Wed Sep 27 13:36:32 2017 -0700
Commit:     Greg Piatigorski <gpiatigo>
CommitDate: Wed Sep 27 14:37:59 2017 -0700

    Add Tasks start page URL to shortcuts yaml file
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1492155

 db/fixtures/miq_shortcuts.yml | 5 +++++
 1 file changed, 5 insertions(+)

Comment 14 Landon LaSmith 2017-10-13 14:43:18 UTC
VERIFIED.  I was able to login successfully using a user account with role access restricted to Everything->Settings 

Version: 5.9.0.2.20171010190026_0413a06