| Summary: | Basic roles shall not be allowed to be deleted | ||
|---|---|---|---|
| Product: | [Retired] CloudForms Cloud Engine | Reporter: | Shveta <ssachdev> |
| Component: | aeolus-conductor | Assignee: | wes hayutin <whayutin> |
| Status: | CLOSED ERRATA | QA Contact: | wes hayutin <whayutin> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 1.0.0 | CC: | akarol, asettle, athomas, cpelland, dajohnso, deltacloud-maint, dgao, dmacpher, hbrock, juwu, morazi, ssachdev |
| Target Milestone: | beta | Keywords: | FutureFeature, Triaged |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Enhancement | |
| Doc Text: |
Permission roles could be completely removed and users could enable an application into a state where no one had administrative rights. This bug fix removes the functionality so that permission roles can no longer be deleted.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-12-04 14:53:02 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Shveta
2011-06-29 08:12:33 UTC
At the moment, the right solution here is unclear. From a back end point of view, there are no "magic roles" -- i.e. any role is allowed to be created/deleted, as it's possible that an admin will want to set up a different set of default permissions -- i.e. instead of one role that allows all admin privileges, they might want to split things up into separate roles, none of which can do _everything_. It may be that certain roles should be identified as "non-modifiable" or "un-deletable", but would that flag also be one that couldn't be edited? Should we allow new roles but require that all "default" ones be left alone? That might make the eventual permissions UI confusing with the addition of new roles without being able to remove the defaults. making sure all the bugs are at the right version for future queries adding to ce-sprint-next adding to ce-sprint-next adding to ce-sprint removing ce-sprint-next tracker The UI for 1.0 won't include support for editing roles, including deleting them. So, this is out of scope for 1.0 moving to 1.1 moving version to 1.0.0 . version = found in version roles can no longer be deleted Roles can no longer be deleted... good 2 go in CFCE v1.1 2012-09-14.5 puddle Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHEA-2012-1516.html |