Bug 1320065 - Multiple host action buttons use incorrect permissions for display
Summary: Multiple host action buttons use incorrect permissions for display
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Users & Roles
Version: 6.0.4
Hardware: Unspecified
OS: Unspecified
unspecified
medium vote
Target Milestone: Unspecified
Assignee: Tomer Brisker
QA Contact: jcallaha
URL: http://projects.theforeman.org/issues...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-22 09:14 UTC by Tomer Brisker
Modified: 2019-09-25 21:17 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-07-27 11:08:59 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 14310 0 None None None 2016-04-22 16:27:56 UTC

Description Tomer Brisker 2016-03-22 09:14:02 UTC 
Currently, the multiples host action button dropdown will display all actions to any user with the `edit_hosts` or `destroy_hosts` permission.
In addition, the `New Host` button will not display for users with only the `create_hosts` permission.
Comment 1 Tomer Brisker 2016-03-22 09:14:05 UTC 
Created from redmine issue http://projects.theforeman.org/issues/14310
Comment 2 Tomer Brisker 2016-03-22 09:14:09 UTC 
Upstream bug assigned to tbrisker
Comment 4 Bryan Kearney 2016-03-24 16:09:42 UTC 
Moving to POST since upstream bug http://projects.theforeman.org/issues/14310 has been closed
-------------
Anonymous
Applied in changeset commit:29c5556a341f0f26ed701d92a6a2ea0203e8e533.
Comment 5 jcallaha 2016-06-16 17:51:52 UTC 

Difference between Administrator tasks that a user with 'Edit Host' roles doesn't have.
Change Puppet Master
Change Puppet CA
Change Power State

There are no more create or destroy hosts permissions. However, a user with 'Edit Host' permissions is able to create and delete hosts.

If you want to further limit the actions a user can take against a host, use the 'View Hosts' role. That only leaves the following actions.
Assign Compliance Policy
Unassign Compliance Policy
Run Job
Comment 6 Bryan Kearney 2016-07-27 11:08:59 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1501
Note You need to log in before you can comment on or make changes to this bug.