Bug 924200

Summary: [xmlrpc_FlagType]Can create flagtype with invalid name via RPC
Product: [Community] Bugzilla Reporter: Xin Zhang <xinzhang>
Component: WebServiceAssignee: Simon Green <sgreen>
Status: CLOSED WONTFIX QA Contact: tools-bugs <tools-bugs>
Severity: urgent Docs Contact:
Priority: high    
Version: 4.4CC: ebaak, jingwang, rjoost, szhou
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-04-16 06:01:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 822007    

Comment 1 Simon Green 2013-03-21 11:08:49 UTC
(In reply to comment #0)
> Steps to Reproduce:
> 1.Login with user who is in "editusers" group.
> 2.Passing an existing name and proper description to this call.
>   
> Expected results:
> Cann't create successfully.

It is perfectly legal to create two different flag types with the same name.

Comment 2 Roman Joost 2013-03-25 03:48:22 UTC
Hi Xin,

would it be possible to add the calls to this report to reproduce this easier? Either as a comment or preferable as an attachment.

Thanks a lot!

Comment 3 Xin Zhang 2013-03-25 06:07:46 UTC
(In reply to comment #2)
> Hi Xin,
> 
> would it be possible to add the calls to this report to reproduce this
> easier? Either as a comment or preferable as an attachment.
> 
> Thanks a lot!

Sure,for example,

>>> xmlrpc.FlagType.create({'name':[123456],'description':'for a test'})
    Return:{'id': 534}

    In actually,array is invalid name,the name should be a string.So it should return related error info.

Thank you.

Comment 4 Simon Green 2013-04-16 06:01:53 UTC
Like the other RPC issue reported, this is not something that I think we need to fix, especially since only people with the proper privilege can use this RPC call.