Bug 1428131 – limit list of user's roles to for creating a group

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1428131 - limit list of user's roles to for creating a group

Summary:	limit list of user's roles to for creating a group

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat CloudForms Management Engine
Classification:	Red Hat
Component:	UI - OPS (Show other bugs)
Sub Component:
Version:	5.8.0
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	GA
Target Release:	5.7.2
Assigned To:	Libor Pichler
QA Contact:	Matouš Mojžíš
Docs Contact:

URL:
Whiteboard:	appliance:configuration:rbac:ui
Keywords:	ZStream

Depends On:	1426619
Blocks:
	Show dependency tree / graph

Reported:	2017-03-01 15:40 EST by Satoe Imaishi
Modified:	2017-04-12 10:40 EDT (History)
CC List:	7 users (show)

See Also:
Fixed In Version:	5.7.2.0
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:	1426619
Environment:
Last Closed:	2017-04-12 10:40:58 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2017:0898	normal	SHIPPED_LIVE	Moderate: cfme, cfme-appliance, and cfme-gemset security, bug fix, and enhancement update	2017-04-12 14:31:08 EDT

Groups: None (edit)

Comment 2 CFME Bot 2017-03-08 14:31:01 EST

New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/4b43ce246836e83f61312775b8a934c5b946a43c

commit 4b43ce246836e83f61312775b8a934c5b946a43c
Author:     Gregg Tanzillo <gtanzill@redhat.com>
AuthorDate: Mon Feb 27 17:14:32 2017 -0500
Commit:     Satoe Imaishi <simaishi@redhat.com>
CommitDate: Wed Mar 8 14:28:35 2017 -0500

    Merge pull request #14081 from lpichler/remove_admin_role_for_tenant_admin
    
    Remove admin role for tenant admin
    (cherry picked from commit 8036eda9632d64d635401ef6c1a747e9e1ee084c)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1428131

 lib/rbac/filterer.rb           | 2 +-
 spec/lib/rbac/filterer_spec.rb | 8 ++++++--
 2 files changed, 7 insertions(+), 3 deletions(-)

Comment 4 Matouš Mojžíš 2017-03-28 11:53:27 EDT

Verified in 5.7.2.0. I can't create anymore group with higher permissions than tenant-admin has.

Comment 6 errata-xmlrpc 2017-04-12 10:40:58 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:0898

Note You need to log in before you can comment on or make changes to this bug.