Bug 783328

Summary: Wrong organizations showing up in user's default environments list
Product: Red Hat Satellite Reporter: Partha Aji <paji>
Component: WebUIAssignee: Partha Aji <paji>
Status: CLOSED CURRENTRELEASE QA Contact: Katello QA List <katello-qa-list>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.0.0CC: cwelton
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-22 18:21:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 747354    

Description Partha Aji 2012-01-20 01:11:13 UTC
1) Have an instance with multiple orgs, and environments
2) As an admin Create a Role X
3) Give X permissions to read an Org OX, and permissions to read users.
4) Create a user UX and assign him role X
5) Login as user UX
6) Administration->Users -> UX-> Environments (on right tab)
7) See the list of available organizations under Default Organizations dropdown, 
  
Actual results:
Org OX shows up in the list, even though user UX can't give himself the right to register systems in any environment in Org OX.

Expected results:
Org OX should not appear on the list. In fact no orgs should show up in that list.


Rules of engagement with respect to default environments
Administrator -> Admin
User Being Modified -> X
Page -> Administration->Users -> X-> Environments


1) Admin with "create/modify users" perm should be able to see all the Organizations and Environments in drop down and update user X's orgs & environments.
2) Admin with only "read users" perm should not be edit/update orgs/environments of user X. The only exception to this rule is case where Admin = X, i.e. Admin is editing himself. In this case the Admin should be only able to see orgs & environments that Admin himself can register systems to.
3) X editing himself via top right-> <username>-> environments. In this case X should be only able to see orgs & environments that X himself can register systems to.

Comment 2 Mike McCune 2012-01-26 19:07:45 UTC
mass ON_QA move

Comment 4 Corey Welton 2012-02-08 03:29:37 UTC
QA Verified.