Red Hat Bugzilla – Bug 1333219
view_subscription filter does not allow subscriptions to be viewed
Last modified: 2017-06-09 08:23:56 EDT
Description of problem: Any non-administrator user role with the view_subscription filter included cannot actually view subscriptions. Version-Release number of selected component (if applicable): Satellite 6.2.0 Beta 1 (RHEL7) How reproducible: 100% Steps to Reproduce: 1. Create user role with Organization --> view_subscriptions 2. Assign role to non-admin user 3. Login as that user 4. Navigate to Content --> Red Hat Subscriptions Actual results: "We're sorry, something went wrong" Expected results: Subscriptions are able to be viewed Additional info: Can also be reproduced with default 'Viewer' role. All other menus appear to work except for this function.
Upstream Katello PR: https://github.com/Katello/katello/pull/6408
Increasing the priority as this was also requested by bug 1391374.
*** Bug 1391374 has been marked as a duplicate of this bug. ***
*** Bug 1393065 has been marked as a duplicate of this bug. ***
Another way to reproduce this issue: 1. Create a role with all Activation Key permissions 2. Assign this role (and any others) to a user 3. Create an activation key with the user to show that create/edit perms are working. Attach some subscriptions to the key. Actual results: View the Subscriptions tab of the key and see the following message: You currently don't have any Subscriptions associated with this Activation Key, you can add Subscriptions after selecting the 'Add' tab. Expected results: A list of subscriptions that the user can edit
*** Bug 1395668 has been marked as a duplicate of this bug. ***
*** Bug 1382031 has been marked as a duplicate of this bug. ***
*** Bug 1414912 has been marked as a duplicate of this bug. ***
*** Bug 1421816 has been marked as a duplicate of this bug. ***
Verified in Satellite 6.2.8 Snap 2 I created a new user with only permission to view subscriptions. After logging into that user, i was able to successfully view the subscriptions page. See attached screenshot. I was also able to see the subscriptions listed in an activation key, after adding the activation key permissions. Bonus: I then removed the subscription viewer permission and went back to the activation key. I was able to see the key, but the subscriptions never loaded (403 in concole).
Instead calling foreman-installer --upgrade I recommend to run faster and safer command: foreman-rake db:migrate
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:0447