Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1203696 - Access restrictions to assets does not work with custom roles
Access restrictions to assets does not work with custom roles
Status: VERIFIED
Product: JBoss BRMS Platform 6
Classification: Retired
Component: Business Central (Show other bugs)
6.1.0
Unspecified Unspecified
high Severity high
: DR1
: 6.2.0
Assigned To: Alexandre Porcelli
Radovan Synek
:
Depends On:
Blocks: 1242692
  Show dependency treegraph
 
Reported: 2015-03-19 09:28 EDT by Radovan Synek
Modified: 2015-12-17 06:02 EST (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1242692 (view as bug list)
Environment:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Radovan Synek 2015-03-19 09:28:40 EDT
Access restrictions on org. units, repositories and projects can be specified via kie-config-cli tool. This tool accepts any string as a role. However, Business central ignores such a custom role and the repository/org.unit/project is completely inaccessible regardless the user has the role or not. Only build-in roles admin, analyst are usable for this feature.

Business central should take custom roles into account. Especially for BRMS - there are just 2 roles (admin,analyst) which gives nearly no option about these restrictions. All users that are not admins must have the role "analyst" => no granularity.

Steps to reproduce:
1. add user testuser with roles admin,customrole
2. start business central
3. create some org.unit, repository
4. log in kie-config-cli
5. restrict access to the repository via add-role-repo command to "customrole" group
6. try to access the repository in Business Central using the testuser account.
Comment 5 Radovan Synek 2015-09-29 11:33:17 EDT
Verified with BPMS-6.2.0.ER3

Note You need to log in before you can comment on or make changes to this bug.