Bug 1750558 - Failed snapshot UI notification shows sensitive information to customer
Summary: Failed snapshot UI notification shows sensitive information to customer
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Providers
Version: 5.10.8
Hardware: All
OS: Unspecified
medium
high
Target Milestone: GA
: 5.12.0
Assignee: Marek Aufart
QA Contact: Jad Haj Yahya
Red Hat CloudForms Documentation
URL:
Whiteboard:
Depends On:
Blocks: 1767785 1757148
TreeView+ depends on / blocked
 
Reported: 2019-09-09 21:19 UTC by Tuan
Modified: 2020-06-10 14:03 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1757148 1767785 (view as bug list)
Environment:
Last Closed: 2020-06-10 12:35:17 UTC
Category: Bug
Cloudforms Team: Openstack
Target Upstream Version:
Embargoed:
dmetzger: mirror+


Attachments (Terms of Use)

Description Tuan 2019-09-09 21:19:33 UTC
Description of problem:
Failed snapshot notification displays unwanted/sensitive information to the user

Current notification shows:
  1. Message completely unreadable to the user;
    2. Ip of the internal provider;
    3. Access port of the internal provider;
    4. Local IP;
    5. Local Port.

Is there a way to control the information being displayed in this notification?

(Screenshot attached)


They understand why the error/notification is occurring and would like to have the ability not display certain information e.g. IP, port



Version-Release number of selected component (if applicable):
5.10

How reproducible:
Everytime

Steps to Reproduce:
1. Create snapshot
2. Create second snapshot on the same VM to receive notification
3.

If you try create snapshot directly in OpenStack without being logged in as admin, and before finishing the first request, try to create another one from the same VM, you will get the same error in OpenStack.

Actual results:


Expected results:


Additional info:

Comment 7 CFME Bot 2019-09-26 14:31:45 UTC
New commit detected on ManageIQ/manageiq-providers-openstack/master:

https://github.com/ManageIQ/manageiq-providers-openstack/commit/f4de9f97b461774bc473f2bf1a29be9a63633176
commit f4de9f97b461774bc473f2bf1a29be9a63633176
Author:     Marek Aufart <maufart>
AuthorDate: Wed Sep 25 02:20:17 2019 -0400
Commit:     Marek Aufart <maufart>
CommitDate: Wed Sep 25 02:20:17 2019 -0400

    Fix Snapshot create error message

    Error passed to UI by failed Snapshot create call was not displayed by UI correctly.
    Updating error message with information parsed from original fog error.

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1750558

 app/models/manageiq/providers/openstack/cloud_manager.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


Note You need to log in before you can comment on or make changes to this bug.