Bug 678435

Summary: permission show on a resource should display super user as well.
Product: [Retired] Pulp Reporter: Preethi Thomas <pthomas>
Component: user-experienceAssignee: Jason Connor <jconnor>
Status: CLOSED NOTABUG QA Contact: Preethi Thomas <pthomas>
Severity: low Docs Contact:
Priority: medium    
Version: unspecifiedCC: mmccune, skarmark
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-10-10 18:20:35 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 673053    

Description Preethi Thomas 2011-02-17 22:13:29 UTC
Description of problem:

[root@preethi ~]# rpm -q pulp
pulp-0.0.139-1.fc14.noarch


[root@preethi ~]# pulp-admin -u admin -p admin  permission show --resource=/
+------------------------------------------+
              Permissions for /
+------------------------------------------+
  admin                	CREATE, READ, UPDATE, DELETE, EXECUTE

[root@preethi ~]# 
[root@preethi ~]# 
[root@preethi ~]# pulp-admin -u admin -p admin  permission show --resource=/repositories/
+------------------------------------------+
       Permissions for /repositories/
+------------------------------------------+
  preethi                	READ                     


IRC conversation for reference

<jconnor> permissions are inherited downward from root (/)
<preethi> http://fpaste.org/QzP7/
<jconnor> so if you can read on /, you can read on anything
<preethi> so why doesn't show admin while / showed admin
<jconnor> so super-users simply get granted create read update delete execute on /
<jconnor> because the listing only grabs the permissions for that particular resource, instead of all the parent resources
<preethi> ok
<jconnor> if you think that's wrong, feel free to file the bug :)
<preethi> i guess its confusing to me  :)
<jconnor> it's not just a question of if it works, but also how well
<preethi> so I am thinking if it only grabs the permission for that resource,  super user has permissions for that as well right? so I would think it should show super user as well
<preethi> jconnor, I will write one up anyway, you can close it if you think its should stay as is
<jconnor> sounds good
<jconnor> I'll probably ask for feedback from others before I close it though
<jconnor> I think we all know my opinion, but it's not the only one :)