Bug 1342600 - giving access to view the quota of a tenant but not listing still allows a user to list all tenants
Summary: giving access to view the quota of a tenant but not listing still allows a us...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance
Version: 5.5.0
Hardware: All
OS: All
high
high
Target Milestone: GA
: 5.8.0
Assignee: Libor Pichler
QA Contact: Pavol Kotvan
URL:
Whiteboard: cfme_tenant:quota
Depends On:
Blocks: 1399216
TreeView+ depends on / blocked
 
Reported: 2016-06-03 16:05 UTC by Felix Dewaleyne
Modified: 2019-11-14 08:16 UTC (History)
7 users (show)

Fixed In Version: 5.8.0.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1399216 (view as bug list)
Environment:
Last Closed: 2017-06-12 17:36:27 UTC
Category: ---
Cloudforms Team: ---
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Felix Dewaleyne 2016-06-03 16:05:09 UTC 
Description of problem:
giving access to view the quota of a tenant but not listing still allows a user to list all tenants

Version-Release number of selected component (if applicable):
5.5.4.

How reproducible:
all the time

Steps to Reproduce:
1. create a set of sub tenants to the main tenants
2. create a user and assign him to one of the subtenants
3. allow him "configure > configuration > access control > tenants > show  (and not list)

Actual results:
user is able to see all tenants instead of hjust his own and the status of it

Expected results:
user is able to see the status of his tenant but not the others

Additional info:
Note You need to log in before you can comment on or make changes to this bug.