Created attachment 1136498 [details] role_filters Description of problem: A role is defined which allows Users to: - Publish a new version of a content view - Promote a version to a LifeCycle Environment - Remove a version from a LifeCycle Environment On the "Yum Content" > "Repositories page, "List/Remove" and "Add" tabs are displayed but User cannot Add or Remove repositories Same for the "Docker Content" tab. Version-Release number of selected component (if applicable): Satellite 6.1.7 How reproducible: 100% Steps to Reproduce: 1. Define a role as mentioned in the description 2. Navigate to content views 3. Verify yum content and docker content for "List/Remove" and "Add" tabs Actual results: Shows "List/Remove" and "Add" tabs while the user has no rights for it. Expected results: Just show read-only lists. Additional info:
Created attachment 1136499 [details] docker_content
Created attachment 1136500 [details] yum_content
Upstream bug assigned to cfouant
Moving 6.2 bugs out to sat-backlog.
Upstream bug assigned to daviddavis
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/13934 has been resolved.
Created attachment 1219107 [details] Verification_role_filters
Created attachment 1219109 [details] verification_yum_content_ok
Verified in: satellite-6.3.0-6.1.beta.el7sat.noarch - RHEL6 and RHEL7 Conclusion: As in attached images, now it is needed more filters added to the role such as "access_dashboard" and "view_hosts", but all "read_only" filters. User was able to see ContentView - Yum Content and "List/Remove" and "Add" tabs not shown.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:0336