Bug 1703967 - [RBAC] User with Everything -> Help -> About can't access the About screen: 403 Forbidden
Summary: [RBAC] User with Everything -> Help -> About can't access the About screen: 4...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: API
Version: 5.11.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: GA
: 5.11.0
Assignee: Yuri Rudman
QA Contact: Tasos Papaioannou
Red Hat CloudForms Documentation
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-04-29 08:42 UTC by Antonin Pagac
Modified: 2019-12-13 14:54 UTC (History)
9 users (show)

Fixed In Version: 5.11.0.6
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-12-13 14:54:36 UTC
Category: Bug
Cloudforms Team: CFME Core
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Antonin Pagac 2019-04-29 08:42:00 UTC
Description of problem:
User with build-in role that has Everything -> Help -> About product feature enabled can't access the About screen with 403 Forbidden displaying in the UI.

With 5.11.0.0, the About screen works with my own non-build-in role.
With 5.11.0.1, it doesn't work at all, only with default superadmin.

All is well in 5.10.4.0.

Version-Release number of selected component (if applicable):
5.11.0.0, 5.11.0.1

How reproducible:
Always

Steps to Reproduce:
1. Create an user with Everything -> Help -> About product feature (for example EvmRole-user role)
2. Log in as this user and try to access Help -> About
3. Error displayed

Actual results:
About screen not displayed; 403 Error thrown in the UI

Expected results:
About screen displayed

Additional info:

Comment 11 CFME Bot 2019-05-23 18:15:44 UTC
New commit detected on ManageIQ/manageiq/master:

https://github.com/ManageIQ/manageiq/commit/9511b44a98a968f8017e75475765694ddec3febd
commit 9511b44a98a968f8017e75475765694ddec3febd
Author:     Yuri Rudman <yrudman>
AuthorDate: Wed May 15 14:21:48 2019 -0400
Commit:     Yuri Rudman <yrudman>
CommitDate: Wed May 15 14:21:48 2019 -0400

    read access to region and zone moved out of ops_explorer feature to under :about
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1703967

 db/fixtures/miq_product_features.yml | 69 +-
 1 file changed, 33 insertions(+), 36 deletions(-)

Comment 12 Tasos Papaioannou 2019-06-03 17:14:11 UTC
Verified on 5.11.0.6.


Note You need to log in before you can comment on or make changes to this bug.