Bug 784904

Summary:	user with register system permission unable to upload list of system packages
Product:	Red Hat Satellite	Reporter:	Tom McKay <tomckay>
Component:	Content Management	Assignee:	Tom McKay <tomckay>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Katello QA List <katello-qa-list>
Severity:	medium	Docs Contact:
Priority:	high
Version:	6.0.0	CC:	cwelton, lzap
Target Milestone:	Unspecified	Keywords:	Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-08-22 18:23:06 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	747354

Description Tom McKay 2012-01-26 15:43:43 UTC

Description of problem:

After a system registers with subscription-manager, it immediately PUTs its packages. This api call has permissions that prevent a user with merely "register systems" permissions from calling it.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Tom McKay 2012-01-26 16:24:47 UTC

commit cfd1b939d6b3ecd94ac6779ed10d220c51dc0809
Author: Tom McKay <thomasmckay>
Date:   Thu Jan 26 11:20:13 2012 -0500

    784904 - a user with register permission can upload systems packages

To test, create a user with just a default org/env set, no other roles. Use this user to register a system, then visit the Packages tab of the system and note that the packages are now listed.

Comment 2 Mike McCune 2012-01-26 19:08:26 UTC

mass ON_QA move

Comment 4 Corey Welton 2012-02-10 13:56:54 UTC

QA Verified. System registered with a user whom otherwise has no other permissions results in proper registration and package list

Comment 5 Lukas Zapletal 2012-02-14 15:55:14 UTC

REOPEN, does not work on vanilla rhsm from RHEL 6.2 (no updates applied):

https://bugzilla.redhat.com/show_bug.cgi?id=786155