Bug 1727948

Summary: api permissions to create a picture not granted unless all permissions granted
Product: Red Hat CloudForms Management Engine Reporter: Felix Dewaleyne <fdewaley>
Component: APIAssignee: Joe Vlcek <jvlcek>
Status: CLOSED CURRENTRELEASE QA Contact: Parthvi Vala <pvala>
Severity: high Docs Contact: Red Hat CloudForms Documentation <cloudforms-docs>
Priority: medium    
Version: 5.10.5CC: abellott, fdewaley, jocarter, jvlcek, nansari, obarenbo, simaishi
Target Milestone: GAKeywords: TestOnly, ZStream
Target Release: 5.11.0   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: 5.11.0.15 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1731157 (view as bug list) Environment:
Last Closed: 2019-12-13 15:01:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: Bug
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1731157    

Description Felix Dewaleyne 2019-07-08 15:59:15 UTC 
Description of problem:
api permissions to create a picture not granted unless all permissions granted

Version-Release number of selected component (if applicable):
5.10.5

How reproducible:
all the time

Steps to Reproduce:
1. grant api permissinos manually without clicking on "grant all" (but do grant everything)
2. use that user to upload a picture with the api


Actual results:
create permission denied

Expected results:
create permission granted

Additional info:
this does not happen if everything is granted from the higher option.
this is a rbac issue
Comment 7 CFME Bot 2019-07-15 20:30:49 UTC 
https://github.com/ManageIQ/manageiq/pull/18982
Comment 8 CFME Bot 2019-07-16 13:40:41 UTC 
New commit detected on ManageIQ/manageiq/master:

https://github.com/ManageIQ/manageiq/commit/5c2aab8587c08ffb454c0df6a4c618b133d20be2
commit 5c2aab8587c08ffb454c0df6a4c618b133d20be2
Author:     Joe VLcek <jvlcek>
AuthorDate: Mon Jul 15 16:04:35 2019 -0400
Commit:     Joe VLcek <jvlcek>
CommitDate: Mon Jul 15 16:04:35 2019 -0400

    Allow modification of "Create new Picture" product feature on a role.

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1727948

 db/fixtures/miq_product_features.yml | 21 +-
 1 file changed, 10 insertions(+), 11 deletions(-)
Comment 11 Parthvi Vala 2019-07-19 06:52:17 UTC 
FIXED. Verified on 5.11.0.15.20190718144823_3d0108f.