Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem:
A user that is allowed to see only a host collection is able to see the names of all hosts in the satellite.
A user with a custom role allowing access to Resource "Host" to view_hosts with a search string of "host_collection = hvcollection" and a Resource of "Host Collections" with view_hosts_collections having a search string of "name = hvhostcollection", both being set to override and unlimited being unchecked is able to see the hosts in the satellite by searching in the host collection with "name = "
Version-Release number of selected component (if applicable):
6.7
How reproducible:
100%
Steps to Reproduce:
0. Have a host collection with some, but not all, of your systems in it
1. Create a custom role
2. Add a filter:
Resource: Host
Permissions: view_hosts
Unlimited: unchecked
Override: checked
Search: host_collection = myhostcollection
3. Add another filter:
Resource: Host Collections
permissions: view_host_collections
Unlimited: unchecked
Override: checked
search: name = myhostcollection
4. Set a user to use that and only that role
5. Login as the user. You should see Monitor, Hosts, and Administer on the left and then the systems in your host collection in the main part of the page.
6. Go to Hosts and then Host Collections.
7. Click on the number of systems in your Host Collection.
8. In the "Filter...." search field, type name =
Actual results:
You'll be shown the names of all systems in the satellite.
Expected results:
You should see only the systems in your host collection.
Additional info:
Upon review of our valid but aging backlog the Satellite Team has concluded that this Bugzilla does not meet the criteria for a resolution in the near term, and are planning to close in a month. This message may be a repeat of a previous update and the bug is again being considered to be closed. If you have any concerns about this, please contact your Red Hat Account team. Thank you.
Thank you for your interest in Red Hat Satellite. We have evaluated this request, and while we recognize that it is a valid request, we do not expect this to be implemented in the product in the foreseeable future. This is due to other priorities for the product, and not a reflection on the request itself. We are therefore closing this out as WONTFIX. If you have any concerns about this feel free to contact your Red Hat Account Team. Thank you.