Bug 736438
| Summary: | Admin owner can not access api/organizations/list_owners | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Bryan Kearney <bkearney> |
| Component: | API | Assignee: | Lukas Zapletal <lzap> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Jitendra Yejare <jyejare> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.0.0 | CC: | lzap, omaciel |
| Target Milestone: | Unspecified | ||
| Target Release: | Unused | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-08-22 17:56:11 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 747354 | ||
|
Description
Bryan Kearney
2011-09-07 17:14:38 UTC
Ok I already fixed a quick workaround for the similar problem: 1634bdc 736384 - workaround for perm. denied for rhsm registration but since this is blocker I am going to provide full solution. Taking. I wonder what the permission should look like. RHSM is requesting list of owners for given user1, it is authorized as user2. So I am assuming the following: a) user1 = user2 b) user1/2 can register system I am going to implement both there permission rules and correct the behavior. 6f6160e 736438 - implement permission check for list_owners The code now checks if the user is the authenticated user. If not, access is denied. TODO: unit test I still get this with katello-0.1.79-1.git.0.ff7921a.fc15.noarch katello-cli-0.1.10-1.git.43.3d76463.fc15.noarch @Bryan - Sorry I fixed it last week, but forgot to do the push. I did it but it failed... bed93c3 736438 - implement permission check for list_owners 311bf3b 736438 - move list_owners from orgs to users controller Pushed. # curl -k -u "admin:admin" https://rhel61-server.usersys.redhat.com/katello/api/users/admin/owners [{"displayName":"ACME_Corporation","key":"ACME_Corporation"},{"displayName":"NY Data Center","key":"NY_Data_Center"}] # curl -k -u "admin:adminghffusersys.redhat.com/katello/api/users/admin/owners curl: (6) Couldn't resolve host 'rhel61-server.ghffusersys.redhat.com' # curl -k -u "admin:adminn" https://rhel61-server.redhat.com/katello/api/users/admin/owners curl: (6) Couldn't resolve host 'rhel61-server.redhat.com' # curl -k -u "admin:adminn" https://rhel61-server.usersys.redhat.com/katello/api/users/admin/owners {"errors":["Invalid credentials"],"displayMessage":"Invalid credentials"} Verified on Katello Version: 0.1.194-1.el6 |