Bug 1540733

Summary:	[Regression] Auth External Auth AD - SSUI - When switching groups in SSUI to a user with group/role EvmGroup-desktop, user is logged out.
Product:	Red Hat CloudForms Management Engine	Reporter:	Matt Pusateri <mpusater>
Component:	UI - Service	Assignee:	Allen W <awight>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Landon LaSmith <llasmith>
Severity:	medium	Docs Contact:
Priority:	high
Version:	5.9.0	CC:	awight, cpelland, dajohnso, lavenel, obarenbo, ohadlevy
Target Milestone:	GA	Keywords:	Regression, TestOnly
Target Release:	5.10.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	auth:externalauth:ad:rbac
Fixed In Version:	5.10.0.0	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1542219 (view as bug list)		Environment:
Last Closed:	2019-02-11 14:05:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	Bug
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	CFME Core	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1542219

Description Matt Pusateri 2018-01-31 21:56:31 UTC

Description of problem:
When switching groups in SSUI to a user with group/role EvmGroup-desktop, user is logged out.  User should not be logged out as EvmGroup-desktop has SSUI permissions.

Version-Release number of selected component (if applicable):
5.9.0.19

How reproducible:


Steps to Reproduce:
1. Configure External Auth for AD.
2. Login in with user with multiple groups, one of which is EvmGroup-Desktop
3. Login to SSUI with the users current group set to some other valid SSUI group, then try to switch to the EvmGroup-Desktop

Actual results:
User is logged out.

Expected results:
User should get appropriate entries based on EvmGroup-Desktop role.

Additional info:
Same as bug: https://bugzilla.redhat.com/show_bug.cgi?id=1531658 but configured for External Auth and not MIQLDAP

Comment 8 Allen W 2018-02-02 17:33:01 UTC

Oooo for clarity, the bz, awaiting merging, is here: https://github.com/ManageIQ/manageiq-ui-service/pull/1373

Comment 9 Allen W 2018-02-05 18:08:38 UTC

Looks like we got in!

Comment 11 Allen W 2018-02-06 14:39:15 UTC

https://github.com/ManageIQ/manageiq-ui-service/pull/1378 is the new pr that is clean for gaprindashvili

Comment 12 Landon LaSmith 2018-07-02 17:56:19 UTC

VERIFIED in 5.10.0.2. I was able to enable external authentication (httpd) and login to the SSUI with a user that is a member of multiple groups (including evmrole-desktop permissions). Changing the active group to/from evmgroup-desktop did not cause a logout and the nav menu was updated accordingly

Comment 13 Red Hat Bugzilla 2023-09-14 04:16:12 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days