Bug 2214272 - Non admin user with view-hosts permission leads to broken error page
Summary: Non admin user with view-hosts permission leads to broken error page
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Hosts
Version: 6.14.0
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: 6.14.0
Assignee: Maria
QA Contact: Lukáš Hellebrandt
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-06-12 12:48 UTC by addubey
Modified: 2023-07-14 09:19 UTC (History)
6 users (show)

Fixed In Version: foreman-3.7.0.2-1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 36550 0 Normal Closed Add PermissionDenied to reports tab in host 2023-06-30 09:42:02 UTC
Red Hat Issue Tracker SAT-18709 0 None None None 2023-06-29 16:31:06 UTC

Description addubey 2023-06-12 12:48:11 UTC
Created attachment 1970419 [details]
page_view

Description of problem: Non-admin user with view-hosts permission leads to a broken error page


Version-Release number of selected component (if applicable): 6.14.0 snap - 3


How reproducible: Always

Steps to Reproduce:
1. Create a non-admin user with view-hosts permission
2. Traverse to Hosts -> All hosts -> Choose host (satellite/any)
3. Click on the reports tab 

Actual results: Page appears stating request failed with status code 403 

Expected results: Some warning messages like we in the Ansible tab
i.e. - You are not authorized to view the page. Request the following permissions from the administrator: view_ansible_roles.

Additional info:

Comment 1 Bryan Kearney 2023-06-30 00:03:09 UTC
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/36550 has been resolved.

Comment 3 Lukáš Hellebrandt 2023-07-14 09:19:58 UTC
Verified with Sat 6.14 snap 7.0.

By running ansible roles on a host and then using the reproducer, I now get to the Reports tab and receive the following:
"""
You are not authorized to perform this action.
Permission denied

You are not authorized to perform this action.
Please request one of the required permissions listed below from a Foreman administrator:

    view_config_reports
"""

When I add the view_config_reports permission, I can see the reports as expected. The reports can also be clicked and viewed in detail.


Note You need to log in before you can comment on or make changes to this bug.