Description of problem: I created a role that has only the following filters: Host Group view_hostgroups label ~ QA% Host/managed create_hosts hostgroup_fullname ~ QA% The way I understand this, this role should allow me to view hostgroups that start with 'QA' and create hosts in those same hostgroups only. When I start creating a new host however, the dropdown menu in the new host screen still allows me to pick hostgroups that do not have 'QA' in their name. Version-Release number of selected component (if applicable): foreman-1.7.2.43-1.el7sat.noarch How reproducible: Steps to Reproduce: 1. Create role with filters as above 2. Attach role to user, log in with that uesr 3. Go to 'New host', click 'Host Group' Actual results: All hostgroups will show. Expected results: Only hostgroups that match the view_hostgroups filter for my role (i.e. hostgroups that start match 'QA%' are shown. Additional info:
Moving 6.2 bugs out to sat-backlog.
This is an older bug which I do not envision being fixed in the near term. I am closing this out. If you believe doing so is an issue, please feel free to re-open and provide additional business information. Thank you.