Bug 2054849

Summary:	CDN loading error for non-admin user and non-default org
Product:	Red Hat Satellite	Reporter:	Vladimír Sedmík <vsedmik>
Component:	Inter Satellite Sync	Assignee:	Samir Jha <sajha>
Status:	CLOSED ERRATA	QA Contact:	Radek Mynar <rmynar>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.11.0	CC:	ehelms, pcreech
Target Milestone:	6.11.0	Keywords:	Triaged
Target Release:	Unused
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-07-05 14:33:19 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vladimír Sedmík 2022-02-15 19:53:10 UTC

Description of problem:
An errors occurs at the downstream Satellite when updating the Upstream Foreman server with non-admin user and non-default org provided.


Version-Release number of selected component (if applicable):
7.0.0 snap 9


How reproducible:
always


Steps to Reproduce:
1. Have an upstream Satellite with non-default org created (optionally with uploaded manifest and synced RH repos).
2. In this Satellite create a role with these permissions:
   view_products, view_organizations, edit_organizations
3. Within the non-default organization create a non-admin user and assign the role from 2. to him.
4. On the downstream Satellite create the SSL CA Content Credential for the Default organization (wget cert + hammer content-credentials create).
5. In the downstream Satellite's UI go to Content > Subscription > Manage Manifest > CDN Configuration > Upstream Foreman server and provide all fields:
   URL: <url of the upstream SAT>
   Username: <user from 3.>
   Password: <his pass>
   Organization label: <the non-default org from 1.>
   LCE label: Library
   CV label: Default_Organization_View
   SSL CA CC: <the one created in 4.>
6. Click Upload


Actual results:
An error occurs:
CDN loading error: https://<UPSTREAM_SAT_FQDN>:443/katello/api/v2/organizations/3/download_debug_certificate not found


Expected results:
no errors


Additional info:
When you provide the user from point 3. with Admin rights on the upstream Satellite, the upload passes without errors.

Comment 2 Samir Jha 2022-03-01 20:31:04 UTC

Created redmine issue https://projects.theforeman.org/issues/34541 from this bug

Comment 3 Bryan Kearney 2022-03-09 20:05:20 UTC

Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/34541 has been resolved.

Comment 5 Radek Mynar 2022-04-08 16:12:45 UTC

Downstream server can be successfully configured with non-default user and non-default organization using steps from description.

VERIFIED with Satellite 6.11 SNAP 15.0

Note: More permissions (view_content_views, view_lifecycle_environments) are needed to actually sync RH repos.

Comment 8 errata-xmlrpc 2022-07-05 14:33:19 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.11 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5498