Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: Openstack provided added as cloud provider using admin user credentials in CFME with tenant mapping enabled. A CFME group is associated with openstack tenant, and a new user (with role EvmRole-super_administrator) created. When we login to CFME UI with this non-admin user, we are unable to see the external networks. Due to this, this non-admin user can't create floating IP for an external network or can't add route external gateway for the external networks. However, CFME Administrator user can do all of this. Version-Release number of selected component (if applicable): CFME 5.10.12.3 RHOSP 13 How reproducible: Always Actual results: Non-admin CFME user who is in a CFME group (with a role which has all permissions for network provider) associated with Openstack tenant can not see the external/public network, hence that user can not create floating IP for public networks or can not add the router for external networks. Expected results: Non-admin CFME user who is in a CFME group (with a role which has all permissions for network provider) associated with Openstack tenant should see the external/public network, and the user should be able to create floating IP for public networks or should be able to add the router for external networks.
https://github.com/ManageIQ/manageiq/pull/19779
New commit detected on ManageIQ/manageiq/master: https://github.com/ManageIQ/manageiq/commit/1eab9ac6bd73ce8d6ad471a44355550a522674c1 commit 1eab9ac6bd73ce8d6ad471a44355550a522674c1 Author: Sam Lucidi <slucidi> AuthorDate: Wed Jan 29 15:13:08 2020 -0500 Commit: Sam Lucidi <slucidi> CommitDate: Wed Jan 29 15:13:08 2020 -0500 Make External-facing networks available to all tenants External-facing networks, at least in Openstack, are supposed to be scoped to all tenants. This updates the tenant_id clause for CloudNetworks to consider whether external_facing is true when deciding whether to allow a tenant to see a network. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1779536 app/models/cloud_network.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)