Bug 481187

Summary: Cloning channel from other organisation causes unauthorization error
Product: [Community] Spacewalk Reporter: Marcus Nilsson <marcus>
Component: ServerAssignee: Jesus M. Rodriguez <jesusr>
Status: CLOSED CANTFIX QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: medium Docs Contact:
Priority: low    
Version: 0.4CC: dgoodwin
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-07-27 17:02:10 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 456554    

Description Marcus Nilsson 2009-01-22 17:00:22 UTC
Description of problem:

Cloning a channel from another organisation causes traceback saying "Attempt to clone unauthorized channel".

Version-Release number of selected component (if applicable):

How reproducible: Always

Steps to Reproduce:
1. Create a channel marked as "public" in org A and add trust to org B
2. Login to org B
3. Try to clone the created channel
  
Actual results:

See traceback below.

Expected results:

A cloned channel in org B.

Additional info:

The following exception occurred while executing this request:
 POST /network/software/channels/manage/edit.pxt HTTP/1.1 (from browser)
 /network/software/channels/manage/edit.pxt (from Apache)

Date:
  Thu Jan 22 17:54:58 2009

Headers:
  Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
  Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
  Accept-Encoding: gzip,deflate
  Accept-Language: sv-se,sv;q=0.8,en-us;q=0.5,en;q=0.3
  Connection: keep-alive
  Content-Length: 151
  Content-Type: application/x-www-form-urlencoded
  Cookie: pxt-session-cookie=12x508c97b167b051968e3616257f465dfe
  Host: spacewalk.office.esn
  Keep-Alive: 300
  Referer: https://spacewalk.office.esn/network/software/channels/manage/clone.pxt
  User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; sv-SE; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5

Form variables:
  Create Channel => Create Channel
  clone_from => 102
  clone_type => current
  formvar_hmac => 41f9f38cf1642fea80632b332a29176f1f6c2cfa
  pxt:trap => rhn:clone_channel_cb

User Information:
  User test_mani (id 2, org_id 2)

Error notes:
  (none)

Initial Request:
  Yes

Error message:
  RHN::Exception: Attempt to clone unauthorized channel '102' by user '2'.
  Sniglets::ChannelEditor /usr/lib/perl5/site_perl/5.8.8/Sniglets/ChannelEditor.pm 498 RHN::Exception::throw
  PXT::ApacheHandler /usr/lib/perl5/site_perl/5.8.8/PXT/ApacheHandler.pm 625 Sniglets::ChannelEditor::clone_channel_cb
  PXT::Request /usr/lib/perl5/site_perl/5.8.8/PXT/Request.pm 747 PXT::ApacheHandler::pxt_parse_data
  PXT::Handlers /usr/lib/perl5/site_perl/5.8.8/PXT/Handlers.pm 112 PXT::Request::include
  PXT::Parser /usr/lib/perl5/site_perl/5.8.8/PXT/Parser.pm 152 PXT::Handlers::pxt_include_handler
  PXT::Parser /usr/lib/perl5/site_perl/5.8.8/PXT/Parser.pm 83 PXT::Parser::expand_tag
  PXT::ApacheHandler /usr/lib/perl5/site_perl/5.8.8/PXT/ApacheHandler.pm 522 PXT::Parser::expand_tags
  PXT::ApacheHandler /usr/lib/perl5/site_perl/5.8.8/PXT/ApacheHandler.pm 124 PXT::ApacheHandler::pxt_parse_data
  PXT::ApacheHandler /usr/lib/perl5/site_perl/5.8.8/PXT/ApacheHandler.pm 124 (eval)
  main -e 0 PXT::ApacheHandler::handler
  main -e 0 (eval)

Comment 1 Devan Goodwin 2009-07-27 17:02:10 UTC
Cloning of shared channels have since been removed, they no longer appear in the list you can clone. As such, closing this issue.