Bug 794740

Summary:	Autorefresh circumvents the Deployments list permissions
Product:	[Retired] CloudForms Cloud Engine	Reporter:	Tomas Sedovic <tsedovic>
Component:	aeolus-conductor	Assignee:	Imre Farkas <ifarkas>
Status:	CLOSED DUPLICATE	QA Contact:	wes hayutin <whayutin>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	1.0.0	CC:	akarol, athomas, deltacloud-maint, hbrock, ssachdev
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-23 15:08:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Tomas Sedovic 2012-02-17 13:57:01 UTC

Steps to Reproduce:
1. Launch several applications as the Admin user
2. Create a new user with default privileges
3. Log in as the new user
4. Select the Monitor tabs
5. Note that none of the Admin's applications are shown
6. Wait 1 minute

Actual results:
Deployments that the user has no privileges to see are loaded by the auto-refresh mechanism.

Expected results:
Only the deployments the user has rights to see should be loaded.

Additional info:
The same thing happens on the Pool Details page (click on any pool, wait a minute, the deployments will show up).

Comment 1 Hugh Brock 2012-02-23 15:08:12 UTC


*** This bug has been marked as a duplicate of bug 788048 ***