Created attachment 1970424 [details] page_view Description of problem: Non-admin user with view-hosts permission has the capability to click on add parameter button, though it doesn't save then too we have the option to delete it and then it pop's up with access denied. Version-Release number of selected component (if applicable): 6.14.0 snap - 3 How reproducible: Always Steps to Reproduce: 1. Create a nonadmin user with view-hosts permission 2. Traverse to the parameter tab by clicking on the host on the All Host page 3. Try to add a param it allows but it doesn't save that, but allows to delete without saving Actual results: Add parameter button is enabled Expected results: It shouldn't be functioning for a user with only view-hosts permission Additional info:
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/36549 has been resolved.
Verified on Sat 6.14 sn7, user with view-host permission can no longer add and remove parameter