Bug 535341 (RHQ-2047)

Summary: Context menu in left nav offers executing operations on a resource even if the user doesn't have privs
Product: [Other] RHQ Project Reporter: Lukas Krejci <lkrejci>
Component: No ComponentAssignee: RHQ Project Maintainer <rhq-maint>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: low    
Version: 1.2CC: mazz, skondkar
Target Milestone: ---Keywords: SubBug
Target Release: ---   
Hardware: All   
OS: All   
URL: http://jira.rhq-project.org/browse/RHQ-2047
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-09-02 07:19:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 565628, 585306    
Attachments:
Description Flags
Screenshot none

Description Lukas Krejci 2009-04-30 16:12:00 UTC
The operations tab of a resource doesn't offer to execute the operations if the user doesn't have the permissions.

We should not offer to execute the operations from the context menu either.

Comment 1 Red Hat Bugzilla 2009-11-10 20:56:39 UTC
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-2047


Comment 2 wes hayutin 2010-02-16 16:54:58 UTC
Temporarily adding the keyword "SubBug" so we can be sure we have accounted for all the bugs.

keyword:
new = Tracking + FutureFeature + SubBug

Comment 3 wes hayutin 2010-02-16 17:00:14 UTC
making sure we're not missing any bugs in rhq_triage

Comment 4 Sunil Kondkar 2011-06-07 08:26:23 UTC
Verified on build#116 (Version: 4.1.0-SNAPSHOT Build Number: 6ae3b13)

Created a role without control-write permissions and assigned a resource group and a user to the role. The resource left navigation context menu displays the Operations option greyed out for the user without control-write permissions. Please refer the attached screenshot.

Also verified this on the compatible groups context menu. For a user without permissions, the Operation option is greyed out in the context menu in the left navigation.
 
Marking as verified.

Comment 5 Sunil Kondkar 2011-06-07 08:28:45 UTC
Created attachment 503406 [details]
Screenshot

Comment 6 Heiko W. Rupp 2013-09-02 07:19:48 UTC
Bulk closing of issues that were VERIFIED, had no target release and where the status changed more than a year ago.