Bug 1553779

Summary: Restricted user can see all group and users
Product: Red Hat CloudForms Management Engine Reporter: Satoe Imaishi <simaishi>
Component: UI - OPSAssignee: Libor Pichler <lpichler>
Status: CLOSED ERRATA QA Contact: Landon LaSmith <llasmith>
Severity: high Docs Contact:
Priority: high    
Version: 5.8.0CC: akarol, ansinha, cpelland, hkataria, lavenel, lpichler, mpovolny, obarenbo, simaishi
Target Milestone: GAKeywords: ZStream
Target Release: 5.9.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: rbac
Fixed In Version: 5.9.2.0 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1549137 Environment:
Last Closed: 2018-05-07 20:45:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On: 1549137    
Bug Blocks:    

Comment 2 CFME Bot 2018-03-09 14:32:33 UTC 
New commits detected on ManageIQ/manageiq/gaprindashvili:

https://github.com/ManageIQ/manageiq/commit/37471e6278ae5e05568fb6902b64f965ab316fac
commit 37471e6278ae5e05568fb6902b64f965ab316fac
Author:     Gregg Tanzillo <gtanzill>
AuthorDate: Wed Mar  7 09:29:48 2018 -0500
Commit:     Gregg Tanzillo <gtanzill>
CommitDate: Wed Mar  7 09:29:48 2018 -0500

    Merge pull request #17061 from lpichler/add_tenant_to_rbac_and_fix_user_and_miq_group

    Fix RBAC for User and enable tagging for Tenants
    (cherry picked from commit d31d9d76e40d1824f11d6d97902d24251e3c0207)

    https://bugzilla.redhat.com/show_bug.cgi?id=1553776
    https://bugzilla.redhat.com/show_bug.cgi?id=1553779

 app/models/miq_group.rb | 4 +-
 app/models/user.rb | 5 +-
 lib/rbac/filterer.rb | 6 +-
 spec/lib/rbac/filterer_spec.rb | 42 +-
 spec/lib/services/resource_sharer_spec.rb | 6 +-
 5 files changed, 42 insertions(+), 21 deletions(-)
Comment 3 Anurag 2018-03-22 11:41:15 UTC 
Hi,

This issue is resolved and now working fine. I have verified this on version: Version 5.9.2.0.20180320210136_355c506. Hence changing the status from on_qa to Verified.

Thanks,
-Anurag
Comment 6 errata-xmlrpc 2018-05-07 20:45:33 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:1328