Bug 1518279 - RBAC doesn't work for notifications
Summary: RBAC doesn't work for notifications
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: UI - Service
Version: 5.9.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: GA
: 5.10.0
Assignee: Allen W
QA Contact: Landon LaSmith
URL:
Whiteboard: testathon
Depends On:
Blocks: 1552801
TreeView+ depends on / blocked
 
Reported: 2017-11-28 14:43 UTC by Christian Jung
Modified: 2019-08-06 20:04 UTC (History)
9 users (show)

Fixed In Version: 5.10.0.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1552801 (view as bug list)
Environment:
Last Closed: 2019-02-11 13:53:55 UTC
Category: ---
Cloudforms Team: CFME Core
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Christian Jung 2017-11-28 14:43:35 UTC
Description of problem:
If removing the RBAC for notifications, the user can still see notifications popping up. 

Version-Release number of selected component (if applicable):
5.9.0.11

How reproducible:
always

Steps to Reproduce:
1. create a new role
2. disable Service UI, Core, Notifications
3.

Actual results:
user can still see notifications popping up in the Ops UI (I tested this by provisioning a VM)

Expected results:
notifications should not show up

Comment 4 Allen W 2017-11-29 16:26:18 UTC
Does the following sentence correctly capture the ask of this bz?

"As a user in the sui, when rbac for notifications is not enabled, I do not want to be shown any notifications" 

Also, wondering if this should be a new product feature of the sui? 

(I'm secretly worried you want us to filter notifications by type)

Also this feels like a REF :thinking:

Comment 5 Chris Kacerguis 2017-11-30 15:10:44 UTC
Apologies, I'm confused by this ticket.

In the Service UI currently, when notifications are turned off, they are disabled.  Christian - Is this not the case?  That is, are you still seeing notifications in the Service UI when the role is disabled?  Would you mind clarifying what is not working in the Service UI?

Comment 6 Christian Jung 2017-11-30 15:24:00 UTC
Chris, yes, the role is disabled but I was still seeing notifications in the Self Service UI.

Comment 7 Allen W 2017-11-30 17:06:40 UTC
We need discussion, but here it is: https://github.com/ManageIQ/manageiq-ui-service/pull/1293/files

The second part of this work might be revisiting miq_user_roles.yml and adding more product features

Comment 8 Dave Johnson 2018-01-02 15:49:01 UTC
Allen, you set needinfo flag but didn't assign it to anyone which means it basically gets ignored.  Needinfo is much more usefull when pointed at someone.  

What are the questions/info that you need?  Sounds like we need to have a call with PM(s) to discuss what the requirement is.

Comment 9 Loic Avenel 2018-01-03 10:12:46 UTC
(In reply to Allen W from comment #7)
> We need discussion, but here it is:
> https://github.com/ManageIQ/manageiq-ui-service/pull/1293/files
> 
> The second part of this work might be revisiting miq_user_roles.yml and
> adding more product features

Allen, What do you want to revisit here?

Comment 10 Allen W 2018-01-08 13:56:59 UTC
Right!  Thanks for that Dave. 

Loic, we should do a 👖 to talk this out but the gist is this:

1. The pr referenced earlier ensures notification showing is function of RBAC, ie role product features. This means, unless the role has the product feature, no notifications will be show.

2. Unless it is desired no existing roles see notifications, we will have to add the `sui_notifications` product feature to miq_user_roles.yml

So essentially looking to get sign off on that approach.  Implementing the pr, then adding the product feature to all existing roles that access SUI OR ALTERNATIVELY input on which roles should see notifications

Comment 11 Allen W 2018-01-12 16:23:14 UTC
https://github.com/ManageIQ/manageiq/pull/16817

Once that one is merged we can merge 

https://github.com/ManageIQ/manageiq-ui-service/pull/1293

THEN this can be closed! (cuz it'll be fixed)

Comment 12 Allen W 2018-02-27 13:09:42 UTC
Looooooooks like both prs made in in, we can now post this!

Comment 14 Landon LaSmith 2018-08-05 19:27:05 UTC
VERIFIED in 5.10.0.8. When disabled, there were no notifications in the SSUI after an ordering a service.  Toggling the notifications on/off, had the desired affect.


Note You need to log in before you can comment on or make changes to this bug.