Bug 798212

Summary: Inconsistency in Application user role.
Product: [Retired] CloudForms Cloud Engine Reporter: Aziza Karol <akarol>
Component: aeolus-conductorAssignee: Scott Seago <sseago>
Status: CLOSED DUPLICATE QA Contact: wes hayutin <whayutin>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 1.0.0CC: akarol, deltacloud-maint, hbrock, ssachdev
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-03-19 18:16:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
no app
none
instances displayed none

Description Aziza Karol 2012-02-28 10:33:52 UTC
Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
scenario1:
1.create a non-admin user "akarol" and as "akarol" launch few ec2 instances.
2.as admin,revoke all the default permissions for akarol.
3.take one application which is launched as akarol for ex "akarol_4" and revoke the "application user" role.
4.login as akarol. the application "akarol_4" is not displayed in the list view which is correct as the application user role is revoked.
however, if you check the instance list, the instances from application "akarol_4" is displayed from where the user can perform the stop operation.


see attached screenshot.

Expected results:
what i think is that if the application is not displayed,then the instances within that application should also not be displayed


Additional info:
rpm -qa | grep aeolus
aeolus-conductor-doc-0.8.0-36.el6.noarch
rubygem-aeolus-cli-0.3.0-10.el6.noarch
aeolus-all-0.8.0-36.el6.noarch
aeolus-conductor-0.8.0-36.el6.noarch
rubygem-aeolus-image-0.3.0-10.el6.noarch
aeolus-configure-2.5.0-15.el6.noarch
aeolus-conductor-daemons-0.8.0-36.el6.noarch

Comment 1 Aziza Karol 2012-02-28 10:35:21 UTC
Created attachment 566285 [details]
no app

Comment 2 Aziza Karol 2012-02-28 10:37:33 UTC
Created attachment 566286 [details]
instances displayed

Comment 3 Scott Seago 2012-02-29 17:46:53 UTC
Same situation as 798204 -- instance permissions weren't revoked, so you can still access them.

Comment 4 wes hayutin 2012-03-19 18:16:51 UTC

*** This bug has been marked as a duplicate of bug 798204 ***