Bug 1540733 - [Regression] Auth External Auth AD - SSUI - When switching groups in SSUI to a user with group/role EvmGroup-desktop, user is logged out.
Summary: [Regression] Auth External Auth AD - SSUI - When switching groups in SSUI to ...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: UI - Service
Version: 5.9.0
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: GA
: 5.10.0
Assignee: Allen W
QA Contact: Landon LaSmith
URL:
Whiteboard: auth:externalauth:ad:rbac
Depends On:
Blocks: 1542219
TreeView+ depends on / blocked
 
Reported: 2018-01-31 21:56 UTC by Matt Pusateri
Modified: 2023-09-14 04:16 UTC (History)
6 users (show)

Fixed In Version: 5.10.0.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1542219 (view as bug list)
Environment:
Last Closed: 2019-02-11 14:05:22 UTC
Category: Bug
Cloudforms Team: CFME Core
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Matt Pusateri 2018-01-31 21:56:31 UTC 
Description of problem:
When switching groups in SSUI to a user with group/role EvmGroup-desktop, user is logged out.  User should not be logged out as EvmGroup-desktop has SSUI permissions.

Version-Release number of selected component (if applicable):
5.9.0.19

How reproducible:


Steps to Reproduce:
1. Configure External Auth for AD.
2. Login in with user with multiple groups, one of which is EvmGroup-Desktop
3. Login to SSUI with the users current group set to some other valid SSUI group, then try to switch to the EvmGroup-Desktop

Actual results:
User is logged out.

Expected results:
User should get appropriate entries based on EvmGroup-Desktop role.

Additional info:
Same as bug: https://bugzilla.redhat.com/show_bug.cgi?id=1531658 but configured for External Auth and not MIQLDAP
Comment 8 Allen W 2018-02-02 17:33:01 UTC 
Oooo for clarity, the bz, awaiting merging, is here: https://github.com/ManageIQ/manageiq-ui-service/pull/1373
Comment 9 Allen W 2018-02-05 18:08:38 UTC 
Looks like we got in!
Comment 11 Allen W 2018-02-06 14:39:15 UTC 
https://github.com/ManageIQ/manageiq-ui-service/pull/1378 is the new pr that is clean for gaprindashvili
Comment 12 Landon LaSmith 2018-07-02 17:56:19 UTC 
VERIFIED in 5.10.0.2. I was able to enable external authentication (httpd) and login to the SSUI with a user that is a member of multiple groups (including evmrole-desktop permissions). Changing the active group to/from evmgroup-desktop did not cause a logout and the nav menu was updated accordingly
Comment 13 Red Hat Bugzilla 2023-09-14 04:16:12 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days
Note You need to log in before you can comment on or make changes to this bug.