Bug 1943272 - Unclear / incomplete error message while trying to promote a content view with a user that has insufficient permissions
Summary: Unclear / incomplete error message while trying to promote a content view wit...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Content Views
Version: 6.5.0
Hardware: x86_64
OS: Linux
high
medium
Target Milestone: 6.8.6
Assignee: Ian Ballou
QA Contact: jcallaha
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-03-25 17:10 UTC by James Jeffers
Modified: 2021-08-30 13:05 UTC (History)
13 users (show)

Fixed In Version: tfm-rubygem-katello-3.16.0.26-1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1722799
Environment:
Last Closed: 2021-04-13 18:45:50 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Permissions before (20.41 KB, image/png)
2021-04-05 15:20 UTC, jcallaha
no flags Details
Permissions after (27.09 KB, image/png)
2021-04-05 15:20 UTC, jcallaha
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 31836 0 High Closed Unclear / incomplete error message while trying to promote a content view with a user that has insufficient permissions 2021-03-25 17:10:40 UTC
Red Hat Knowledge Base (Solution) 2764401 0 None None None 2021-03-25 17:10:40 UTC
Red Hat Product Errata RHBA-2021:1181 0 None None None 2021-04-13 18:46:00 UTC

Comment 7 jcallaha 2021-04-05 15:17:02 UTC
Verified in Satellite 6.8.6 Snap 1

Followed the reproducer steps, creating an "updater" user with the desired permissions. Upon trying to promote a content view version, I now see the inclusion of the more appropriate permission needed to perform this action.

-bash-4.2# hammer content-view version list --organization-id 1
---|-------------------------------|---------|-------------|-----------------------
ID | NAME                          | VERSION | DESCRIPTION | LIFECYCLE ENVIRONMENTS
---|-------------------------------|---------|-------------|-----------------------
2  | test 1.0                      | 1.0     |             | Library               
1  | Default Organization View 1.0 | 1.0     |             | Library               
---|-------------------------------|---------|-------------|-----------------------

-bash-4.2# hammer -u updater content-view version promote --content-view-id 2 --to-lifecycle-environment-id 2 --id 2 --organization-id 1
[Foreman] Password for updater: 
Could not promote the content view:
  Access denied
  Missing one of the required permissions: promote_or_remove_content_views, promote_or_remove_content_views_to_environments


After adding the missing permission "lifecycle environments => promote_or_remove_content_views_to_environments", the user is able to successfully promote the version.

-bash-4.2# hammer -u updater content-view version promote --content-view-id 2 --to-lifecycle-environment-id 2 --id 2 --organization-id 1
[Foreman] Password for updater: 
[........................................................................................] [100%]

Comment 8 jcallaha 2021-04-05 15:20:03 UTC
Created attachment 1769297 [details]
Permissions before

Comment 9 jcallaha 2021-04-05 15:20:32 UTC
Created attachment 1769298 [details]
Permissions after

Comment 14 errata-xmlrpc 2021-04-13 18:45:50 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Satellite 6.8.6 Async Bug Fix Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1181


Note You need to log in before you can comment on or make changes to this bug.