Bug 2443308

Summary: Users not in 'insidergroup' do not have permission for private comments / attachments
Product: [Fedora] Fedora Reporter: Katerina Koukiou <kkoukiou>
Component: anaconda-webuiAssignee: Katerina Koukiou <kkoukiou>
Status: CLOSED ERRATA QA Contact:
Severity: high Docs Contact:
Priority: unspecified    
Version: rawhideCC: alpha, awilliam, kkoukiou, kparal, lruzicka, mkolman, robatino, rvykydal
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard: AcceptedBlocker
Fixed In Version: anaconda-webui-67-1.fc45 Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2026-03-06 21:19:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2362357    

Description Katerina Koukiou 2026-02-27 12:59:31 UTC
So the automatic bugzilla report with private attachment enabled crashes:

Traceback (most recent call last): File "<string>", line 75, in <module> attachment_id = bz.attachfile( bug_id, ...<5 lines>... is_private=True ) File "/usr/lib/python3.14/site-packages/bugzilla/base.py", line 1637, in attachfile ret = self._backend.bug_attachment_create( listify(idlist), data, kwargs) File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 161, in bug_attachment_create return self._xmlrpc_proxy.Bug.add_attachment(pdata) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^ File "/usr/lib64/python3.14/xmlrpc/client.py", line 1096, in __call__ return self.__send(self.__name, args) ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 125, in _ServerProxy__request ret = ServerProxy._ServerProxy__request( self, methodname, (authparams,)) File "/usr/lib64/python3.14/xmlrpc/client.py", line 1435, in __request response = self.__transport.request( self.__host, ...<2 lines>... verbose=self.__verbose ) File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 100, in request return self.__request_helper(url, request_body) ~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 47, in __request_helper return self.parse_response(response) ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 84, in parse_response return unmarshaller.close() ~~~~~~~~~~~~~~~~~~^^ File "/usr/lib64/python3.14/xmlrpc/client.py", line 642, in close raise Fault(**self._stack[0]) xmlrpc.client.Fault: <Fault 113: 'Sorry, but you are not allowed to (un)mark comments or attachments as private.'>

Reproducible: Always

Steps to Reproduce:
Create a bug report through webUI with a non redhat account.

Comment 1 Katerina Koukiou 2026-02-27 13:05:05 UTC
Upstream fix: https://github.com/rhinstaller/anaconda-webui/pull/1190

Comment 2 Kamil Páral 2026-02-27 13:38:51 UTC
For a video demonstration, see attachment 2129104 [details] .

Proposing as F44 blocker:
https://fedoraproject.org/wiki/Basic_Release_Criteria#Failure_reporting

Comment 3 Adam Williamson 2026-02-27 18:36:41 UTC
+3 in https://pagure.io/fedora-qa/blocker-review/issue/2062 , marking accepted. I will backport this fix so we can get it in a candidate compose today.

Comment 4 Fedora Update System 2026-02-27 19:40:08 UTC
FEDORA-2026-48bfc8a951 (anaconda-webui-66-2.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-48bfc8a951

Comment 5 Fedora Update System 2026-02-28 00:49:59 UTC
FEDORA-2026-48bfc8a951 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-48bfc8a951`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-48bfc8a951

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Lukas Ruzicka 2026-03-05 09:07:05 UTC
This works for me on F44 RC 1.2, so I think that the issue has been resolved.

Comment 7 Lukas Ruzicka 2026-03-05 09:14:35 UTC
Thank you for your work, Katerina.

Comment 8 Fedora Update System 2026-03-05 11:13:16 UTC
FEDORA-2026-db45346513 (anaconda-webui-67-1.fc45) has been submitted as an update to Fedora 45.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-db45346513

Comment 9 Fedora Update System 2026-03-05 13:32:30 UTC
FEDORA-2026-f5c7f9e4c2 (anaconda-webui-67-2.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f5c7f9e4c2

Comment 10 Fedora Update System 2026-03-05 15:57:47 UTC
FEDORA-2026-db45346513 (anaconda-webui-67-1.fc45) has been pushed to the Fedora 45 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Katerina Koukiou 2026-03-05 16:03:54 UTC
This can be moved again to VERIFIED. FEDORA-2026-f5c7f9e4c2 was created, containing the code that the previous updated included as a patch build. So this is already tested by QA.

Comment 12 Fedora Update System 2026-03-06 01:44:10 UTC
FEDORA-2026-f5c7f9e4c2 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-f5c7f9e4c2`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-f5c7f9e4c2

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 13 Adam Williamson 2026-03-06 21:19:04 UTC
66-2.fc44, which fixed this, was manually tagged stable: https://forge.fedoraproject.org/releng/tickets/issues/13243#issuecomment-574310

so this is now resolved. Once the freeze is lifted, 67-2.fc44 will be pushed stable and replace it.