Bug 1678450

Summary: [RFE][L-8] Service dialogs created by the root tenant are not locked and can be modified or deleted by a child tenant.
Product: Red Hat CloudForms Management Engine Reporter: Satoe Imaishi <simaishi>
Component: ApplianceAssignee: Libor Pichler <lpichler>
Status: CLOSED ERRATA QA Contact: Niyaz Akhtar Ansari <nansari>
Severity: high Docs Contact: Red Hat CloudForms Documentation <cloudforms-docs>
Priority: high    
Version: 5.5.0CC: abellott, asogukpi, cpelland, dajohnso, dmetzger, gtanzill, hhudgeon, jhardy, jocarter, kdixon, knoha, lpichler, mfeifer, obarenbo, simaishi, smallamp, sshveta
Target Milestone: GAKeywords: FutureFeature, RFE, ZStream
Target Release: 5.10.1   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: service:dialog:cfme_tenant
Fixed In Version: 5.10.1.2 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: 1297415 Environment:
Last Closed: 2019-03-06 09:50:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On: 1297415    
Bug Blocks:    
Attachments:
Description Flags
Service Catalogs permission none

Comment 1 CFME Bot 2019-02-18 19:26:53 UTC 
New commit detected on ManageIQ/manageiq-ui-classic/hammer:

https://github.com/ManageIQ/manageiq-ui-classic/commit/ea8a589dd463614cbf6809676e1ac8d86ac0a761
commit ea8a589dd463614cbf6809676e1ac8d86ac0a761
Author:     Milan Zázrivec <mzazrivec>
AuthorDate: Fri Jan 25 06:27:17 2019 -0500
Commit:     Milan Zázrivec <mzazrivec>
CommitDate: Fri Jan 25 06:27:17 2019 -0500

    Merge pull request #5197 from lpichler/use_correct_product_features_to_access_dialog_new_edit_actions

    Use correct dialog product features in MiqAeCustomizationController

    (cherry picked from commit 73a2a68d17e840b8aad9cfaaf203c9ee98a3cfe5)

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1678449
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1678450

 app/controllers/miq_ae_customization_controller/dialogs.rb | 4 +-
 spec/controllers/miq_ae_customization_controller/dialogs_spec.rb | 39 +
 2 files changed, 41 insertions(+), 2 deletions(-)
Comment 2 Niyaz Akhtar Ansari 2019-02-26 09:57:04 UTC 
Created attachment 1538722 [details]
Service Catalogs permission

Additional steps:

To access the dialog form we need to give some permission to Service Catalogs which comes under product features Services tree.

Verified in Version 5.10.1.2.20190219165527_7a4a22b
Comment 4 errata-xmlrpc 2019-03-06 09:50:52 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0453