Bug 1203696 - Access restrictions to assets does not work with custom roles
Summary: Access restrictions to assets does not work with custom roles
Keywords:
Status: CLOSED EOL
Alias: None
Product: JBoss BRMS Platform 6
Classification: Retired
Component: Business Central
Version: 6.1.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: DR1
: 6.2.0
Assignee: Alexandre Porcelli
QA Contact: Radovan Synek
URL:
Whiteboard:
Depends On:
Blocks: 1242692
TreeView+ depends on / blocked
 
Reported: 2015-03-19 13:28 UTC by Radovan Synek
Modified: 2020-03-27 20:04 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1242692 (view as bug list)
Environment:
Last Closed: 2020-03-27 20:04:49 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1192831 0 urgent CLOSED User with no privileges for repository can view and modify assets in that repository 2021-02-22 00:41:40 UTC
Red Hat Bugzilla 1203694 0 high CLOSED Roles added to org. unit and repository are ignored by Business Central 2021-02-22 00:41:40 UTC

Internal Links: 1192831 1203694

Description Radovan Synek 2015-03-19 13:28:40 UTC
Access restrictions on org. units, repositories and projects can be specified via kie-config-cli tool. This tool accepts any string as a role. However, Business central ignores such a custom role and the repository/org.unit/project is completely inaccessible regardless the user has the role or not. Only build-in roles admin, analyst are usable for this feature.

Business central should take custom roles into account. Especially for BRMS - there are just 2 roles (admin,analyst) which gives nearly no option about these restrictions. All users that are not admins must have the role "analyst" => no granularity.

Steps to reproduce:
1. add user testuser with roles admin,customrole
2. start business central
3. create some org.unit, repository
4. log in kie-config-cli
5. restrict access to the repository via add-role-repo command to "customrole" group
6. try to access the repository in Business Central using the testuser account.

Comment 5 Radovan Synek 2015-09-29 15:33:17 UTC
Verified with BPMS-6.2.0.ER3


Note You need to log in before you can comment on or make changes to this bug.