Bug 1366205 - [Admin Portal] Disable removal of system permissions from built-in 'Everyone' group
Summary: [Admin Portal] Disable removal of system permissions from built-in 'Everyone'...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: Frontend.WebAdmin
Version: 4.0.2.5
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ovirt-4.1.0-beta
: 4.1.0.2
Assignee: Ondra Machacek
QA Contact: Jiri Belka
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-08-11 09:55 UTC by Jiri Belka
Modified: 2017-02-01 14:39 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2017-02-01 14:39:07 UTC
oVirt Team: Infra
Embargoed:
rule-engine: ovirt-4.1+
rule-engine: planning_ack+
mperina: devel_ack+
pstehlik: testing_ack+

Attachments (Terms of Use)
screenshot (105.89 KB, image/png)
2016-08-11 09:55 UTC, Jiri Belka 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 782741 0 unspecified CLOSED MLA | 'Everyone' option should be removed from System Permissions. 2021-02-22 00:41:40 UTC
oVirt gerrit 66260 0 'None' MERGED bll: Don't allow to remove system perms for Everyone group 2021-02-15 18:32:10 UTC

Internal Links: 782741

Description Jiri Belka 2016-08-11 09:55:55 UTC 
Created attachment 1190002 [details]
screenshot

Description of problem:

One can assing a role to Everyone per object but this is missing in System permissions' "Add" dialog, see screenshot. Thus it is not possible to assing a role - eg UserProfileEditor - to everyone.

Version-Release number of selected component (if applicable):
ovirt-engine-webadmin-portal-4.0.2.4-0.1.el7ev.noarch

How reproducible:
100%

Steps to Reproduce:
1. Configure -> System Permissions - click "Add"
2. Is there 'Everyone' checkbox?
3.

Actual results:
Everyone is missing in the dialog

Expected results:
should be there

Additional info:
Comment 1 Martin Perina 2016-08-12 08:02:58 UTC 
Jiri, do we have a possibility to add system permission to Everyone in 3.6? If so, we need to backport to 4.0.z.

Also there's a workaround for that, administrator can use DataCenter permissions to assing a role for Everyone in that DC.
Comment 2 Ondra Machacek 2016-08-15 12:56:17 UTC 
It's not possible in 3.6 as well.
Comment 6 Jiri Belka 2017-01-02 10:39:17 UTC 
ok, rhevm-4.1.0-0.3.beta2.el7.noarch

Error while executing action: It's not allowed to remove system permissions assigned to built-in Everyone group
Note You need to log in before you can comment on or make changes to this bug.