Bug 738337

Summary:	a user without permission to "manage repositories" can create a new repository
Product:	[Other] RHQ Project	Reporter:	Mike Foley <mfoley>
Component:	Core UI	Assignee:	Heiko W. Rupp <hrupp>
Status:	CLOSED NOTABUG	QA Contact:	Mike Foley <mfoley>
Severity:	medium	Docs Contact:
Priority:	urgent
Version:	4.1	CC:	hrupp, lkrejci
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-09-29 15:07:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	625146, 734807

Description Mike Foley 2011-09-14 15:09:17 UTC

Description of problem:  a user without permission to "manage repositories" can create a new repository


Version-Release number of selected component (if applicable):
rhq 4.1 09/14/2011 build

How reproducible:
100%

Steps to Reproduce:
1.  assign a role to a user without "manage repositories" permission
2.  login with this user.  create a repository
3.
  
Actual results:
ability to create a repository

Expected results:
not able to create a repository

Additional info:

Comment 1 Mike Foley 2011-09-29 13:11:33 UTC

Additional info:  to create a repository ... the keystrokes are  Administration top-level menu, Repository (on lower left side of page), then Create New Button.

Comment 2 Lukas Krejci 2011-09-29 15:07:15 UTC

This is by design.

http://docs.redhat.com/docs/en-US/JBoss_Operations_Network/3.0/html/Basic_Admin_Guide/managing-packages.html#content-authz