Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1481859 - Provisions via Users in multiple groups in tenants in SSUI result in VMs being provisioned to wrong group/tenant
Provisions via Users in multiple groups in tenants in SSUI result in VMs bein...
Status: CLOSED ERRATA
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Provisioning (Show other bugs)
5.7.0
Unspecified Unspecified
high Severity high
: GA
: 5.7.4
Assigned To: Lucy Fu
Shveta
: ZStream
Depends On: 1467364
Blocks:
  Show dependency treegraph
 
Reported: 2017-08-15 17:52 EDT by Satoe Imaishi
Modified: 2017-12-18 15:28 EST (History)
7 users (show)

See Also:
Fixed In Version: 5.7.4.0
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1467364
Environment:
Last Closed: 2017-12-18 15:28:28 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: CFME Core


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:3484 normal SHIPPED_LIVE Important: Red Hat CloudForms security, bug fix, and enhancement update 2017-12-18 20:24:16 EST

  None (edit)
Comment 2 CFME Bot 2017-08-15 17:56:01 EDT
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/c1c84e85f14677674001e2c15d245a0afbc4cad9

commit c1c84e85f14677674001e2c15d245a0afbc4cad9
Author:     Greg McCullough <gmccullo@redhat.com>
AuthorDate: Wed Aug 2 17:07:40 2017 -0400
Commit:     Satoe Imaishi <simaishi@redhat.com>
CommitDate: Tue Aug 15 17:53:04 2017 -0400

    Merge pull request #15696 from lfu/service_user_in_groups_1467364
    
    Set user's group to the requester group.
    (cherry picked from commit 1d2c55f08a65a895059415cd829990c5c2db5f74)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1481859

 app/models/mixins/miq_request_mixin.rb |  4 +++-
 spec/models/miq_request_spec.rb        | 20 ++++++++++++++++++++
 2 files changed, 23 insertions(+), 1 deletion(-)
Comment 3 CFME Bot 2017-08-15 18:10:56 EDT
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/eea7b864c36f4cb1dadc87043bc2c8844c48c4db

commit eea7b864c36f4cb1dadc87043bc2c8844c48c4db
Author:     Greg McCullough <gmccullo@redhat.com>
AuthorDate: Wed Aug 9 17:01:12 2017 -0400
Commit:     Satoe Imaishi <simaishi@redhat.com>
CommitDate: Tue Aug 15 18:08:41 2017 -0400

    Merge pull request #61 from lfu/service_user_in_groups_1467364
    
    Need to pass the user's group in to automate when the provision starts.
    (cherry picked from commit 8de13ba4c7413710e4481cd7484b3675a12bd517)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1481859

 lib/miq_automation_engine/engine/miq_ae_engine.rb    |  6 ++++--
 lib/miq_automation_engine/engine/miq_ae_object.rb    |  2 +-
 spec/lib/miq_automation_engine/miq_ae_engine_spec.rb | 17 ++++++++++++++++-
 3 files changed, 21 insertions(+), 4 deletions(-)
Comment 4 CFME Bot 2017-08-15 18:26:15 EDT
New commit detected on ManageIQ/manageiq/euwe:
https://github.com/ManageIQ/manageiq/commit/dc9a8adbfc2fc6a0a0b5209103f13e7f5c1b4efa

commit dc9a8adbfc2fc6a0a0b5209103f13e7f5c1b4efa
Author:     Greg McCullough <gmccullo@redhat.com>
AuthorDate: Wed Aug 9 17:02:43 2017 -0400
Commit:     Satoe Imaishi <simaishi@redhat.com>
CommitDate: Tue Aug 15 18:20:55 2017 -0400

    Merge pull request #15760 from lfu/service_user_in_groups_1467364_2
    
    miq_group_id is required by automate.
    (cherry picked from commit 2fe7cd55211866217cf4c0c1c23687e1372d4008)
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1481859

 app/models/automation_task.rb       |  2 ++
 spec/models/automation_task_spec.rb | 15 ++++++++++-----
 2 files changed, 12 insertions(+), 5 deletions(-)
Comment 5 Shveta 2017-10-25 16:23:51 EDT
1) Configured LDAP on CFME.
2) Created three groups in CFME group1 , group2 , group 3.
3) Assigned above roles to EVM_Administrator role so that provisioning is enabled.
4) Assigned LDAP user test-suer1 to these groups one by one .
5) Logged in as this user with one group at a time in OPS UI and SSUI .
6) Provisioned service , service was provisioned correctly in each group .
And request did not disappear.


Verified in 5.7.4.0.20170913182424_63a1e18
Comment 8 errata-xmlrpc 2017-12-18 15:28:28 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3484

Note You need to log in before you can comment on or make changes to this bug.