Bug 1086499

Description of problem:

You can configure roles for repositories using kie-config-cli.sh. Then you will see only authorized repositories in "Project Explorer" ([Authoring]->[Project Authoring]). (NOTE: You need to reboot BRMS. See BZ1086489)

But you can still access unauthorized repositories in "File Explorer" ([Authoring]->[Administration])



Steps to Reproduce:

A) Login to business-central as admin
B) Create 'repo1' and 'repo2' in business-central (Organization Unit is 'example')

C) Configure roles for repositories using kie-config-cli.sh

[tkobayas@tkobayas kie-config-cli-6.0.2-redhat-6-dist]$ ./kie-config-cli.sh 
********************************************************

************* Welcome to Kie config CLI ****************

********************************************************

...

>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>Please enter command (type help to see available commands): 
add-role-repo
>>Repository alias:repo1
>>Security roles (comma separated list):role1
Result:
Role role1 added successfully to repository repo1

>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>Please enter command (type help to see available commands): 
add-role-repo
>>Repository alias:repo2
>>Security roles (comma separated list):role2
Result:
Role role2 added successfully to repository repo2
>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>Please enter command (type help to see available commands): 
push-changes
Result:
Pushed successfully
>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>Please enter command (type help to see available commands): 
list-repo
Result:
Currently available repositories: 
	Repository repo1
	 scheme: git
	 uri: git://repo1
	 environment: {scheme=git, security:roles=[role1]}
	 roles: [role1]
	Repository repository1
	 scheme: git
	 uri: git://repository1
	 environment: {username=, scheme=git, security:roles=[], password=****}
	 roles: []
	Repository repo2
	 scheme: git
	 uri: git://repo2
	 environment: {scheme=git, security:roles=[role2]}
	 roles: [role2]

D) Add users in EAP

bin/add-user.sh -a --user user1 --password password1! --role analyst,role1
bin/add-user.sh -a --user user2 --password password1! --role analyst,role2

E) reboot BRMS

F) Login to business-central as user1

G) Go to [Authoring]->[Project Authoring]. Confirm that you cannot access 'repo2'

H) Go to [Authoring]->[Administration]

Actual results:

user1 can access repo2 (See attached user1_can_access_repo2_in_Administration.png)

Expected results:

user1 cannot access repo2