Description of problem: User gets below error in api.log when trying to retire service from SUI [----] E, [2018-09-10T17:30:04.562690 #7392:ad794c] ERROR -- : MIQ(Api::ServicesController.api_error) API Error [----] E, [2018-09-10T17:30:04.562777 #7392:ad794c] ERROR -- : MIQ(Api::ServicesController.api_error) Api::ForbiddenError: Use of Action retire is forbidden Version-Release number of selected component (if applicable): 5.9.4.7 How reproducible: Always Steps to Reproduce: 1. Create a catalog item as UserA, make sure UserA is the owner 2. Login to Service UI as UserA 3. Try to retire the service by following below https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html-single/self_service_user_interface_guide/#retiring-service Actual results: Error in the UI with text "There was an error retiring this service" Expected results: The service gets retired Additional info:
Created attachment 1483109 [details] Services Permissions for role Copied-EvmRole-user_self_service
Created attachment 1483110 [details] SUI permissions for retire
May I've a reproducer that's alive, please?
Or a log link that doesn't 404?
Hi Drew, I have re-downloaded the logs at http://collab-shell.usersys.redhat.com/02179065/ ERROR: [----] E, [2018-09-10T17:06:57.319693 #7392:ad6fb0] ERROR -- : MIQ(Api::TasksController.api_error) Api::ForbiddenError: Use of the read action is forbidden I think this error is due to this permission, when this below role permission was ON, the error didn't appear Everything > Services > Requests > Operate > Approve and Deny I was working on a separate case where I noticed this behaviour in 5.10.0.33 as well. Please see BZ 1701098
Hey Tina, per the last line of comment 13, https://bugzilla.redhat.com/show_bug.cgi?id=1701098 is similar. Could I please get your opinion on how this is supposed to work?