Bug 1750558

Summary: Failed snapshot UI notification shows sensitive information to customer
Product: Red Hat CloudForms Management Engine Reporter: Tuan <tuado>
Component: ProvidersAssignee: Marek Aufart <maufart>
Status: CLOSED NOTABUG QA Contact: Jad Haj Yahya <jhajyahy>
Severity: high Docs Contact: Red Hat CloudForms Documentation <cloudforms-docs>
Priority: medium    
Version: 5.10.8CC: akarol, dmetzger, jfrey, jhardy, jocarter, maufart, mshriver, obarenbo
Target Milestone: GAKeywords: TestOnly, ZStream
Target Release: 5.12.0Flags: dmetzger: mirror+
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1757148 1767785 (view as bug list) Environment:
Last Closed: 2020-06-10 12:35:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: Bug
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: Openstack Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1767785, 1757148    

Description Tuan 2019-09-09 21:19:33 UTC
Description of problem:
Failed snapshot notification displays unwanted/sensitive information to the user

Current notification shows:
  1. Message completely unreadable to the user;
    2. Ip of the internal provider;
    3. Access port of the internal provider;
    4. Local IP;
    5. Local Port.

Is there a way to control the information being displayed in this notification?

(Screenshot attached)


They understand why the error/notification is occurring and would like to have the ability not display certain information e.g. IP, port



Version-Release number of selected component (if applicable):
5.10

How reproducible:
Everytime

Steps to Reproduce:
1. Create snapshot
2. Create second snapshot on the same VM to receive notification
3.

If you try create snapshot directly in OpenStack without being logged in as admin, and before finishing the first request, try to create another one from the same VM, you will get the same error in OpenStack.

Actual results:


Expected results:


Additional info:

Comment 7 CFME Bot 2019-09-26 14:31:45 UTC
New commit detected on ManageIQ/manageiq-providers-openstack/master:

https://github.com/ManageIQ/manageiq-providers-openstack/commit/f4de9f97b461774bc473f2bf1a29be9a63633176
commit f4de9f97b461774bc473f2bf1a29be9a63633176
Author:     Marek Aufart <maufart>
AuthorDate: Wed Sep 25 02:20:17 2019 -0400
Commit:     Marek Aufart <maufart>
CommitDate: Wed Sep 25 02:20:17 2019 -0400

    Fix Snapshot create error message

    Error passed to UI by failed Snapshot create call was not displayed by UI correctly.
    Updating error message with information parsed from original fog error.

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1750558

 app/models/manageiq/providers/openstack/cloud_manager.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)