Created attachment 1368548 [details] Screenshot showing both access control tree and vertical nav Description of problem: There is a link to 'Requests' in the Compute->Infrastrcuture Vertical navigation when logged in as a user configured with the roles: EvmRole-desktop EvmRole-approver EvmRole-user EvmRole-vm_user EvmRole-administrator EvmRole-super_administrator This 'requests' page links to the Services->Requests page. The page is not included in the RBAC access tree for these roles (or any role), as it is under 'Services' where it should be. The item should be removed from veritical navigation under Compute->Infrastructure. Version-Release number of selected component (if applicable): 5.8.3.0 5.9.0.13 How reproducible: 100%
Very similar issue that may be the same core bug - 'Requests' is available as evmrole-super_administrator under Automation->Automate. Harpreet would you like me to write a separate BZ for Automation?
Sudhir why is this considered an RFE? There are items included in the vertical navigation which the administrator has no control over, because there is not a matching item in the access control tree when configuring role access. This is a bug, not an enhancement to remove this erroneous vertical navigation entry.
Upon re-visiting, I agree that this needs to be a bug.. Removing RFE.. Thanks Mike.
*** Bug 1375495 has been marked as a duplicate of this bug. ***
Fixed by https://github.com/ManageIQ/manageiq-ui-classic/pull/4062
Verified in CFME 5.10.0.2, the 'Requests' link is no longer in Compute->Infrastructure vertical nav for the listed users.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2019:0212