Created attachment 1270819 [details] container error Description of problem: Version-Release number of selected component (if applicable): 5.7.2.1 How reproducible: always Steps to Reproduce: 1.Set up role, group(set one restricted tag) and user 2.Add container provider 3.Set tag to one of container images 4.As restricted user navigate to container detail page 5.Click on 'Container image' field Actual results: Error appears Expected results: Error should appear 'User ... is not authorized to access 'Container Image' Additional info: evm.log error: ERROR -- : MIQ(container_image_controller-show): User 'testtag' is not authorized to access 'Container Image' record id '2'
Created attachment 1270821 [details] container error log
Can't reproduce: Please provide more information on how to reproduce, or about affected version. ------------ On 5.7.2: ruby-2.2.6 manageiq euwe-3, or commit :b531b1e (used to build 5.7.2) What I did: 1. Set up role, group(can only see tag: location=>paris) and user 2. Add container provider 3. Add my company tag (location=>paris) to provider and image 4. log out of admin 5. log in as user 6. go to provider 7. container image tag, show the only image with tag, not error. ------------ On current master: ruby-3.3 managei1-master Also no bug (the files with error in the log have changed significantly).
Please repeat steps below: 1. Set up role, group, and user 2. Add container provider 3. Add my company tag to a provider, container1, and container image2(Note: tagged container image2 should be different that used for container1). 4. log out of admin 5. log in as user 6. go to container1 detail page 7. Click on the "Container Image" field Affected version: 5.7.2.1
Created attachment 1272527 [details] images of trying to repruduce
hi, thanks what i did ( see attachment 1272527 [details] ) 1. created role, group and user [ no restrictions ] 2. create container provider, checked I can see container images 3. restrict group to only see: location => paris 4. add tags: provider - location => paris container - location => paris container_image - location => new-york [ different that used for container ] 5. log out of admin 6. log in as user 7. go to container detail, click container image, got error Thanks
submitted upstream: https://github.com/ManageIQ/manageiq/pull/14802
merged upstream https://github.com/ManageIQ/manageiq/pull/14802
Verified on 5.7.3.1
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:1601