Red Hat Bugzilla – Bug 1477015
[RFE] A non-admin users with view permissions are unable to view resource details since they are only displayed in the edit form.
Last modified: 2017-08-10 12:26:25 EDT
Description of problem:
A non-admin user with viewer role or 'view_provisioning_templates' permission is only able to see the list (name) of provisioning templates and unable to see the template box or details of the provisioning template.
Version-Release number of selected component (if applicable):
How reproducible: (Always)
Steps to Reproduce:
1) Create a non-admin user and assign 'Viewer' role to it or assign a custom role having 'view_provisioning_templates' permissions filter added to it.
2) From Satellite web interface navigate to 'Hosts' -> 'Provisioning templates'.
3) Click on the name of any provisioning templates being listed.
No action takes place and provisioning template details are not opened.
The template box or details of provisioning template should be visible with read only permission.
The issue is reproducible on Satellite version 6.2.10
to see a template box (edit form) user must have edit_provisioning_templates permission, could you verify that adding this permissions helps? I think it's consistent with all other pages, view permission only allows user to display the resources in index page.
(In reply to Marek Hulan from comment #1)
> to see a template box (edit form) user must have edit_provisioning_templates
> permission, could you verify that adding this permissions helps? I think
> it's consistent with all other pages, view permission only allows user to
> display the resources in index page.
I can confirm that.
However, if I have view_provisioning_templates I *should* be able to view the templates. I can do this via hammer (and the API). The web UI should reflect these permissions.
I agree but that would mean displaying a different, read-only, form. As I said, it works this way for every resource, good example is subnet. If we change it, we should change it everywhere. A simple solution might be just disabling the submit button. I'll change the BZ title to match it. As you can imagine this would be a big change so it can take a while.