Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1570118 - CloudForms 4.6 - filtering based on tags does not work for catalog items
CloudForms 4.6 - filtering based on tags does not work for catalog items
Status: CLOSED ERRATA
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance (Show other bugs)
5.9.0
All Linux
high Severity high
: GA
: 5.9.2
Assigned To: Libor Pichler
Landon LaSmith
: ZStream
Depends On: 1568013
Blocks: 1468726
  Show dependency treegraph
 
Reported: 2018-04-20 12:24 EDT by Satoe Imaishi
Modified: 2018-06-26 02:26 EDT (History)
15 users (show)

See Also:
Fixed In Version: 5.9.2.4
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1568013
Environment:
Last Closed: 2018-05-07 16:49:42 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2018:1328 None None None 2018-05-07 16:50 EDT

  None (edit)
Comment 2 CFME Bot 2018-04-20 12:26:08 EDT
New commit detected on ManageIQ/manageiq/gaprindashvili:

https://github.com/ManageIQ/manageiq/commit/4347128c7f564223941c1f60367faf225f6cd4a5
commit 4347128c7f564223941c1f60367faf225f6cd4a5
Author:     Keenan Brock <keenan@thebrocks.net>
AuthorDate: Fri Apr 20 12:04:57 2018 -0400
Commit:     Keenan Brock <keenan@thebrocks.net>
CommitDate: Fri Apr 20 12:04:57 2018 -0400

    Merge pull request #17322 from lpichler/revert_make_user_filter_as_restriction

    Revert "Merge pull request #15367"
    (cherry picked from commit 9f8c439882b88b6dc0866d74c0df29c168cdaca7)

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1570118

 lib/rbac/filterer.rb | 16 +-
 spec/lib/rbac/filterer_spec.rb | 12 +-
 2 files changed, 14 insertions(+), 14 deletions(-)
Comment 7 Landon LaSmith 2018-05-03 08:34:22 EDT
VERIFIED in 5.9.2.4

I created a role/group/user that was restricted to user/group ownership and a tag. That user was able to view catalog items that were tagged only OR un-tagged but group (or user owned).
Comment 10 errata-xmlrpc 2018-05-07 16:49:42 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:1328

Note You need to log in before you can comment on or make changes to this bug.