Red Hat Bugzilla – Bug 1136893
organizations UI "All users" toggle not checking permissions for being displayed
Last modified: 2016-07-27 04:44:34 EDT
Users that do not have the ability to see all users should not be shown the UI toggle to add them to an organization. The same goes for the other resources types (Smart Proxies, Subnets, etc.). The user should have edit org and view all users to see the toggle.
Created from redmine issue http://projects.theforeman.org/issues/7335
Moving to POST since upstream bug http://projects.theforeman.org/issues/7335 has been closed ------------- Anonymous Applied in changeset commit:42a712b356f7dabcad7e6a27d23cfb3253e463cf.
Please provide the repro steps to verify.
1. Create a user with the edit_organization permission and a limited view_users permission (i.e. filtered so it only shows some users not all). 2. Go to edit organization -> users. 3. Verify that "all users" check box isn't displayed. 4. Repeat for other resource types and for locations.
VERIFIED: # rpm -qa | grep foreman foreman-gce-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch hp-bl465cg7-01.rhts.eng.bos.redhat.com-foreman-client-1.0-1.noarch hp-bl465cg7-01.rhts.eng.bos.redhat.com-foreman-proxy-1.0-1.noarch foreman-selinux-1.11.0-0.develop.201510071426git6234447.el7.noarch tfm-rubygem-foreman_bootdisk-6.0.0-2.fm1_10.el7.noarch foreman-release-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch foreman-ovirt-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch tfm-rubygem-hammer_cli_foreman_tasks-0.0.8-1.el7.noarch foreman-libvirt-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch foreman-postgresql-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch foreman-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch tfm-rubygem-foreman_gutterball-0.0.1-3.el7.noarch hp-bl465cg7-01.rhts.eng.bos.redhat.com-foreman-proxy-client-1.0-1.noarch tfm-rubygem-foreman_discovery-4.1.2-1.fm1_11.el7.noarch foreman-compute-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch tfm-rubygem-hammer_cli_foreman_docker-0.0.3-4.el7.noarch foreman-debug-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch foreman-proxy-1.11.0-0.develop.201511020918git26aba85.el7.noarch foreman-vmware-1.11.0-0.develop.201511062002gitd3c978e.el7.noarch tfm-rubygem-hammer_cli_foreman-0.4.0-1.201510201150gitab068d9.el7.noarch tfm-rubygem-foreman_hooks-0.3.9-1.el7.noarch tfm-rubygem-foreman-tasks-0.7.6-1.fm1_10.el7.noarch foreman-release-scl-1-1.el7.x86_64 tfm-rubygem-foreman_docker-1.4.1-2.fm1_10.el7.noarch tfm-rubygem-hammer_cli_foreman_bootdisk-0.1.3-3.el7.noarch steps: 1. Create a user with the edit_organization permission and a limited view_users permission (i.e. filtered so it only shows some users not all). 2. Go to edit organization -> users. 3."all users" check box isn't displayed. 4. repeated for other resource types and for locations.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1500