Bug 1757994

Summary:	Adding Volume Snapshot (CloudVolumeSnapshot) to RBAC
Product:	Red Hat CloudForms Management Engine	Reporter:	Jared Deubel <jdeubel>
Component:	Appliance	Assignee:	Jared Deubel <jdeubel>
Status:	CLOSED NOTABUG	QA Contact:	Devidas Gaikwad <dgaikwad>
Severity:	low	Docs Contact:	Red Hat CloudForms Documentation <cloudforms-docs>
Priority:	low
Version:	5.10.9	CC:	abellott, dmetzger, gtanzill, ngupta, obarenbo
Target Milestone:	GA	Keywords:	TestOnly, ZStream
Target Release:	5.12.0	Flags:	dmetzger: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1773630 1773632 (view as bug list)		Environment:
Last Closed:	2020-06-10 12:49:20 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	Bug
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	CFME Core	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1773630, 1773632

Description Jared Deubel 2019-10-02 22:23:05 UTC

Description of problem:
Enable RBAC checking on volume snapshots. Previously RBAC was not filtering on this class and users with managed filters (tags) were able to see all ever instance of a volume snapshot.

Version-Release number of selected component (if applicable):
5.10.9.1

How reproducible:
100%

Comment 2 CFME Bot 2019-10-03 18:50:33 UTC

https://github.com/ManageIQ/manageiq/pull/19356

Comment 4 CFME Bot 2019-10-11 13:35:27 UTC

New commit detected on ManageIQ/manageiq/master:

https://github.com/ManageIQ/manageiq/commit/0a1b41f3f7aef32837b518a273b8d10c0d84b6e1
commit 0a1b41f3f7aef32837b518a273b8d10c0d84b6e1
Author:     Jared Deubel <jdeubel>
AuthorDate: Wed Oct  2 14:05:31 2019 -0400
Commit:     Jared Deubel <jdeubel>
CommitDate: Wed Oct  2 14:05:31 2019 -0400

    Adding Volume Snapshot (CloudVolumeSnapshot) to RBAC

    https://bugzilla.redhat.com/show_bug.cgi?id=1757994

 lib/rbac/filterer.rb | 1 +
 1 file changed, 1 insertion(+)