Bug 2063155
| Summary: | WebUI: do not allow subid range deletion | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Sudhir Menon <sumenon> | ||||
| Component: | ipa | Assignee: | Alexander Bokovoy <abokovoy> | ||||
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 8.6 | CC: | abiagion, cheimes, frenaud, mpolovka, rcritten, rjeffman, ssidhaye, tscherf | ||||
| Target Milestone: | rc | Keywords: | Triaged | ||||
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | ipa-4.9.10-1.module+el8.7.0+15691+2b2c1dd5 | Doc Type: | If docs needed, set a value | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2022-11-08 09:35:50 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Sudhir Menon
2022-03-11 11:48:38 UTC
Instead of allowing to delete subid ranges from the command-line, it is better to remove the delete button from the Web UI. Deletion of a subid range is a sensitive operation that should not be performed unless the user is absolutely aware of the risks. Deletion would still be possible through direct ldap modification. Therefore I'm changing the description of this BZ into "WebUI: do not allow subid range deletion". Upstream PR: https://github.com/freeipa/freeipa/pull/6246 Upstream issue: https://pagure.io/freeipa/issue/9150 Fixed upstream master: https://pagure.io/freeipa/c/46dc1c76ef9996341b89167c6a0c1f63e44f4381 Fixed upstream ipa-4-9: https://pagure.io/freeipa/c/59cf9017a009bb5eb4f6ef0ed07aa21e60614ab3 Pre-verified manually using ipa-server-4.9.10-1.module+el8.7.0+15691+2b2c1dd5.x86_64 Steps: 1. Login into WebUI 2. generate users 3. generate subids for the users 4. try to delete subids Actual result: Deletion is not possible, Delete button is missing (see the attached screenshot). Therefore marking as pre-verified - tested. Automation pending. Created attachment 1893682 [details]
Pre-verification screenshot
Since the automation is not yet present in the python3-ipatest package, verified manually with ipa-server-4.9.10-4.module+el8.7.0+15926+daa9f08b.x86_64 Steps: 1. Login into WebUI 2. generate users 3. generate subids for the users 4. try to delete subids Actual result: Deletion is not possible, Delete button is missing (see the attached screenshot). Therefore marking as pre-verified - tested. Automation exists. Test added upstream in ipatests/test_webui/test_subid.py::test_subid::test_subid_range_deletion_not_allowed
master:
bf4c512 ipatests: WebUI: do not allow subid range deletion
06780f4 webui tests: fix test_subid suite
ipa-4-9:
58b0267 ipatests: WebUI: do not allow subid range deletion
58e12bd webui tests: fix test_subid suite
ipa-4-10:
38e5bcf ipatests: WebUI: do not allow subid range deletion
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (idm:client and idm:DL1 bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7540 |