Bug 2214285
| Summary: | User with only view-host permission can attempt to schedule a job which leads to Categories list failed with: Request failed with status code 403 | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | addubey |
| Component: | Remote Execution | Assignee: | satellite6-bugs <satellite6-bugs> |
| Status: | NEW --- | QA Contact: | Satellite QE Team <sat-qe-bz-list> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.14.0 | CC: | aruzicka, rlavi |
| Target Milestone: | Unspecified | Keywords: | Triaged, UserExperience |
| Target Release: | Unused | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | Bug | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Is this a regression from earlier Satellite release? Is there a stack trace that can be attached? |
Created attachment 1970428 [details] page_view Description of problem: User with only view-host permission can attempt to schedule a job which leads to errors -> Categories list failed with Request failed with status code 403 Version-Release number of selected component (if applicable): 6.14.0 snap -3 How reproducible: Always Steps to Reproduce: 1. Create a user with a view-host permission 2. Navigate to Hosts -> All hosts -> select host 3. Try to click on the schedule job button, it opens up a broken page for initiating the rex job. Actual results: Page opens up stating Job category - Error and States -> Categories list failed with: Request failed with status code 403 Expected results: I believe users with such permission should not be able to run/click on the schedule job button like the dropdown of all jobs is locked for example. Additional info: