Bug 1922174

Summary: Non admin user with viewer role can see host collection page but with angular code within it
Product: Red Hat Satellite Reporter: Anand Agrawal <aagrawal>
Component: Host CollectionsAssignee: satellite6-bugs <satellite6-bugs>
Status: CLOSED DUPLICATE QA Contact: Stephen Wadeley <swadeley>
Severity: high Docs Contact:
Priority: unspecified    
Version: 6.9.0CC: mzalewsk, paji
Target Milestone: 6.9.0Keywords: Regression, Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1922145
: 1925172 (view as bug list) Environment:
Last Closed: 2021-02-09 22:10:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1922134, 1922145    
Bug Blocks: 1925172    
Attachments:
Description Flags
viewer role - host collection details none

Description Anand Agrawal 2021-01-29 12:16:59 UTC 
Description of problem:

Non-admin user with 'Viewer' role can see Host Collection detail but with angular code in it.

Version-Release number of selected component (if applicable):
6.9

How reproducible:

Always

Steps to Reproduce:
1. Create a non-admin user with 'viewer' role.
2. Login with above non admin role.
3. GoTo Host -> Host Collections -> select a existing Host Collection to see details

Actual results:

It shows angular code

Expected results:

It should not show angular code.

Additional info:
Comment 1 Brad Buckingham 2021-02-04 12:27:03 UTC 
Created attachment 1755049 [details]
viewer role - host collection details
Comment 2 Anand Agrawal 2021-02-04 14:02:47 UTC 
Similar issue is observed at the page 

Content -> Lifecycle Environment -> Library -> Page with angular is displayed
Comment 3 Partha Aji 2021-02-09 22:10:04 UTC 

*** This bug has been marked as a duplicate of bug 1922134 ***