Bug 909692

Summary: Non admin user have access to /hosts url
Product: Red Hat Enterprise Virtualization Manager Reporter: Ondra Machacek <omachace>
Component: ovirt-engineAssignee: Ravi Nori <rnori>
Status: CLOSED CURRENTRELEASE QA Contact: Ondra Machacek <omachace>
Severity: high Docs Contact:
Priority: unspecified    
Version: 3.1.2CC: acathrow, dyasny, iheim, italkohe, lpeer, Rhev-m-bugs, sgrinber, yeylon, ykaul, yzaslavs
Target Milestone: ---Keywords: Regression, ZStream
Target Release: 3.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: infra
Fixed In Version: sf8 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 910368 (view as bug list) Environment:
Last Closed: 2013-06-11 09:18:25 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 910368, 915537    

Description Ondra Machacek 2013-02-10 13:36:01 UTC 
Description of problem:
Non-admin user can have access to /hosts url.

Version-Release number of selected component (if applicable):
si27

How reproducible:
always

Steps to Reproduce:
1. Add user non-admin role(for example: UserVmManager on cluster)
2. Access /hosts url as user.
  
Actual results:
User can view /hosts url.

Expected results:
error 403, forbidden

Additional info:
bug 839569
Comment 7 Itamar Heim 2013-06-11 09:18:25 UTC 
3.2 has been released
Comment 8 Itamar Heim 2013-06-11 09:42:23 UTC 
3.2 has been released