Bug 790141

Summary: Unable to login with a non-admin user
Product: [Retired] Pulp Reporter: John Matthews <jmatthew>
Component: user-experienceAssignee: Jason Connor <jconnor>
Status: CLOSED CURRENTRELEASE QA Contact: Preethi Thomas <pthomas>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 1.0.0CC: mmccune, tsanders
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-24 20:10:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description John Matthews 2012-02-13 18:28:26 UTC
Description of problem:

I'm unable to run pulp-admin auth login with a new user.  Once I add 'read' permission on /users/ then I am able to login.  See additional info at end.


Version-Release number of selected component (if applicable):
pulp-0.0.266-1.el6.noarch

How reproducible:
Always

Steps to Reproduce:
1. Create a new user
2. pulp-admin auth login -u newuser -p pass

  
Actual results:
Login

Expected results:
# pulp-admin auth login -u jwm -p redhat
error:  operation failed: Permission Denied

Additional info:
I added "super-users" access to my user jwm
Then I was able to login.
# pulp-admin -u admin -p admin user list
+------------------------------------------+
               Available Users
+------------------------------------------+

Login :               	admin                    
Name  :               	None                     
Roles :               	super-users              


Login :               	jwm                      
Name  :               	John M.                  
Roles :               	super-users   

# pulp-admin auth login -u jwm -p redhat
User credentials successfully stored at [/root/.pulp/user-cert.pem]


Now I remove 'super-users' and verify unable to login.

# pulp-admin -u admin -p admin role remove --user jwm --role super-users 
[ jwm ] removed from role [ super-users ]

]# pulp-admin auth login -u jwm -p redhat
error:  operation failed: Permission Denied



Now we add 'read' on /users/ to 'jwm' and I can login.

# pulp-admin -u admin -p admin permission grant --resource '/users/' --user jwm -o read
Operations ['READ'] granted to user [ jwm ] on resource [ /users/ ]

# pulp-admin -u admin -p admin permission show --resource '/users/'
+------------------------------------------+
           Permissions for /users/
+------------------------------------------+
  jwm                	READ                    


# pulp-admin auth login -u jwm -p redhat
User credentials successfully stored at [/root/.pulp/user-cert.pem]

Comment 1 Jason Connor 2012-02-15 14:49:27 UTC
added automatic granting of permissions to new users for their own resource and for admin_certificate
fix pushed in 978c83499edb977aaa7a39baaa1c6809e98e89d3 and 5452b12b5d7411baddcccdf47ee90214d28d85c0

Comment 2 Jeff Ortel 2012-02-17 17:17:37 UTC
build: 0.267

Comment 3 Preethi Thomas 2012-02-20 21:28:39 UTC
verified
[root@preethi ~]# rpm -q pulp
pulp-0.0.267-1.fc15.noarch

[root@preethi ~]# pulp-admin user create --user newuser
Enter password for user newuser: 
Re-enter password for user newuser: 
Successfully created user [ newuser ] with name [ None ]

[root@preethi ~]# pulp-admin auth login -u newuser -p pass
User credentials successfully stored at [/root/.pulp/user-cert.pem]

Comment 4 Preethi Thomas 2012-02-24 20:10:55 UTC
Pulp v1.0 is released
Closed Current Release.