Bug 1460891 – RBAC : User with no permissions should not be able to create catalog item

Bug 1460891 - RBAC : User with no permissions should not be able to create catalog item

Summary:	RBAC : User with no permissions should not be able to create catalog item

Status:	ASSIGNED

Aliases:	None

Product:	Red Hat CloudForms Management Engine
Classification:	Red Hat
Component:	UI - OPS (Show other bugs)
Sub Component:
Version:	5.7.0
Hardware:	Unspecified Unspecified

Priority	medium Severity medium
Target Milestone:	GA
Target Release:	cfme-future
Assigned To:	Dan Clarizio
QA Contact:	Shveta
Docs Contact:

URL:
Whiteboard:	service:rbac
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-06-13 00:38 EDT by Shveta
Modified:	2018-07-09 01:50 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	Bug
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	CFME Core

Attachments	(Terms of Use)
role (145.61 KB, image/png) 2017-06-13 00:38 EDT, Shveta	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Shveta 2017-06-13 00:38:20 EDT

Created attachment 1287159 [details]
role

Description of problem:


Version-Release number of selected component (if applicable):
5.7.3.1.20170608124102_4b35a9e

How reproducible:


Steps to Reproduce:
1. Add a new role with no vm and template restriction and with no permissions: (Nothing checked as in attached screenshot.)
2. Add a new group and assign it the role
3. Add a new user and put it in the group in Step 3
4. Log in as the new user.
5. Create catalog item. user is able to create catalog item. 

Actual results:


Expected results:


Additional info:

Comment 3 Oleksandr Hiliazov 2018-01-22 06:16:45 EST

This problem remains on 5.9

Note You need to log in before you can comment on or make changes to this bug.