Bug 2130909 - Non-privileged user can start DataSource creation
Summary: Non-privileged user can start DataSource creation
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Container Native Virtualization (CNV)
Classification: Red Hat
Component: User Experience
Version: 4.12.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 4.12.0
Assignee: Aviv Turgeman
QA Contact: Leon Kladnitsky
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-09-29 12:02 UTC by Leon Kladnitsky
Modified: 2023-01-24 13:41 UTC (History)
0 users

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-01-24 13:41:07 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
Menu is enabled (53.04 KB, image/png)
2022-09-29 12:02 UTC, Leon Kladnitsky 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Github kubevirt-ui kubevirt-plugin pull 900 0 None open Bug 2130909: Non-privileged user can start DataSource creation 2022-09-29 21:29:09 UTC
Red Hat Issue Tracker CNV-21564 0 None None None 2022-11-23 09:07:34 UTC
Red Hat Product Errata RHSA-2023:0408 0 None None None 2023-01-24 13:41:16 UTC

Description Leon Kladnitsky 2022-09-29 12:02:29 UTC 
Created attachment 1915002 [details]
Menu is enabled

Description of problem: Description of problem: Non-privileged user can start DataSource creation, but can not actually create a DataSource


Version-Release number of selected component (if applicable):


How reproducible: always


1. Log in as test/test
2. Open DataSource page
3. Click on "Create DataSource" button and select "With form"
4. Fill DataSource form and click "Create" button.

Actual results: Error message appears, the DataSource is not created


Expected results: "Create DataSource" button is disabled for non-privileged user, or whole DataSource page is hidden



Additional info:
Comment 2 Leon Kladnitsky 2022-10-06 06:15:57 UTC 
Verified on v4.12.0-131
Comment 6 errata-xmlrpc 2023-01-24 13:41:07 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Virtualization 4.12.0 Images security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2023:0408
Note You need to log in before you can comment on or make changes to this bug.