Bug 1429909 - User with Manage Alerts permission unable to delete a Group Alert Definition they created
Summary: User with Manage Alerts permission unable to delete a Group Alert Definition ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: JBoss Operations Network
Classification: JBoss
Component: Monitoring - Alerts
Version: JON 3.3.7
Hardware: All
OS: Unspecified
low
medium
Target Milestone: CR01
: JON 3.3.9
Assignee: Ruben Vargas Palma
QA Contact: Jeeva Kandasamy
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-03-07 12:27 UTC by Yogesh
Modified: 2020-05-14 15:43 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2017-10-02 17:21:51 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Role Permission (301.11 KB, image/png)
2017-09-08 10:56 UTC, Yogesh
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 2953441 0 None None None 2017-03-27 19:47:01 UTC
Red Hat Product Errata RHEA-2017:2846 0 normal SHIPPED_LIVE Red Hat JBoss Operations Network 3.3.9 bug fix update 2017-10-02 21:21:28 UTC

Description Yogesh 2017-03-07 12:27:30 UTC
Description of problem:
If a JBossON user with read-write permissions creates an alert on a resource then the same user can delete the alert. But if that user creates Alert on a resource group, he can not delete the Alert. 

Version-Release number of selected component (if applicable):
JBossON 3.3.7

How reproducible:
As Above
Steps to Reproduce:
1.Create a User with read-write permissions
2.Create Alert on a resource-group
3.Delete that Alert

Actual results:
"Alert Deleted" message is displayed but Alert is not deleted.
Expected results:
Alert should be deleted. 
Additional info:

Comment 2 Yogesh 2017-09-08 10:56:25 UTC
Created attachment 1323680 [details]
Role Permission

Comment 3 Yogesh 2017-09-08 11:00:33 UTC
Hi, 

Create a resource group(eg.TestGroup) with rhqadmin user. Then Create a ROLE (eg.Support-Role)and give permissions as given in the attachment above. Add the new group TestGroup to the ROLE Support-Role. Then create a user(eg.xyz) with the ROLE Support-Role. 
Login to JON UI with user xyz. Create an alert on the TestGroup. Then try to delete that Alert. 

Alert will not be deleted.

Comment 6 Simeon Pinder 2017-09-19 11:33:25 UTC
Moving to ON_QA.

JON 3.3.9 CR01 artifacts are available for test from here:
http://download.eng.bos.redhat.com/brewroot/packages/org.jboss.on-jboss-on-parent/3.3.0.GA/135/maven/org/jboss/on/jon-server-patch/3.3.0.GA/jon-server-patch-3.3.0.GA.zip
 *Note: jon-server-patch-3.3.0.GA.zip maps to CR01 build of
 jon-server-3.3.0.GA-update-09.zip.

Comment 7 Jeeva Kandasamy 2017-09-20 18:55:05 UTC
JBossON user with read-write permissions(Managing Alerts) able to create an alert on a resource then the same user able to delete the alert.
Works as expected.


Version info:
-------------

OS: Fedora 26
Browser: Firefox 55.0.3 (64-bit)

JBoss Operations Network	
Version: 3.3.0.GA Update 09
Build Number: 44ba698:204e925
GWT Version: 2.5.0
SmartGWT Version: 3.0p

Comment 8 errata-xmlrpc 2017-10-02 17:21:51 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:2846


Note You need to log in before you can comment on or make changes to this bug.