Bug 1526495

Summary: [RFE] Requests link in Compute->Infrastructure Vertical Nav
Product: Red Hat CloudForms Management Engine Reporter: Mike Shriver <mshriver>
Component: UI - OPSAssignee: Harpreet Kataria <hkataria>
Status: CLOSED ERRATA QA Contact: Mike Shriver <mshriver>
Severity: high Docs Contact:
Priority: high    
Version: 5.8.0CC: akarol, cpelland, hkataria, lavenel, mpovolny, obarenbo, simaishi, smallamp
Target Milestone: GAKeywords: FutureFeature
Target Release: 5.10.0Flags: mshriver: automate_bug+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: rbac:service
Fixed In Version: 5.10.0.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-02-07 23:00:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Screenshot showing both access control tree and vertical nav none

Description Mike Shriver 2017-12-15 16:04:15 UTC
Created attachment 1368548 [details]
Screenshot showing both access control tree and vertical nav

Description of problem:
There is a link to 'Requests' in the Compute->Infrastrcuture Vertical navigation when logged in as a user configured with the roles:
EvmRole-desktop
EvmRole-approver
EvmRole-user
EvmRole-vm_user
EvmRole-administrator
EvmRole-super_administrator

This 'requests' page links to the Services->Requests page.

The page is not included in the RBAC access tree for these roles (or any role), as it is under 'Services' where it should be.

The item should be removed from veritical navigation under Compute->Infrastructure.

Version-Release number of selected component (if applicable):
5.8.3.0
5.9.0.13

How reproducible:
100%

Comment 1 Mike Shriver 2017-12-15 22:53:48 UTC
Very similar issue that may be the same core bug - 'Requests' is available as evmrole-super_administrator under Automation->Automate.

Harpreet would you like me to write a separate BZ for Automation?

Comment 2 Mike Shriver 2018-01-04 15:23:36 UTC
Sudhir why is this considered an RFE?

There are items included in the vertical navigation which the administrator has no control over, because there is not a matching item in the access control tree when configuring role access.  

This is a bug, not an enhancement to remove this erroneous vertical navigation entry.

Comment 3 Sudhir Mallamprabhakara 2018-01-25 15:33:10 UTC
Upon re-visiting, I agree that this needs to be a bug.. Removing RFE.. Thanks Mike.

Comment 5 Harpreet Kataria 2018-03-01 19:29:22 UTC
*** Bug 1375495 has been marked as a duplicate of this bug. ***

Comment 6 Harpreet Kataria 2018-06-18 19:35:19 UTC
Fixed by https://github.com/ManageIQ/manageiq-ui-classic/pull/4062

Comment 7 Mike Shriver 2018-07-05 18:35:34 UTC
Verified in CFME 5.10.0.2, the 'Requests' link is no longer in Compute->Infrastructure vertical nav for the listed users.

Comment 8 errata-xmlrpc 2019-02-07 23:00:52 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2019:0212