Bug 2443308 - Users not in 'insidergroup' do not have permission for private comments / attachments
Summary: Users not in 'insidergroup' do not have permission for private comments / att...
Keywords:
Status: ON_QA
Alias: None
Product: Fedora
Classification: Fedora
Component: anaconda-webui
Version: rawhide
Hardware: Unspecified
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Katerina Koukiou
QA Contact:
URL:
Whiteboard: AcceptedBlocker
Depends On:
Blocks: BetaBlocker, F44BetaBlocker
TreeView+ depends on / blocked
 
Reported: 2026-02-27 12:59 UTC by Katerina Koukiou
Modified: 2026-02-28 00:49 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github rhinstaller anaconda-webui pull 1191 0 None open error reporting: add optional 'Restrict access to the report' via Bugzilla groups 2026-02-27 16:55:16 UTC

Description Katerina Koukiou 2026-02-27 12:59:31 UTC
So the automatic bugzilla report with private attachment enabled crashes:

Traceback (most recent call last): File "<string>", line 75, in <module> attachment_id = bz.attachfile( bug_id, ...<5 lines>... is_private=True ) File "/usr/lib/python3.14/site-packages/bugzilla/base.py", line 1637, in attachfile ret = self._backend.bug_attachment_create( listify(idlist), data, kwargs) File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 161, in bug_attachment_create return self._xmlrpc_proxy.Bug.add_attachment(pdata) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^ File "/usr/lib64/python3.14/xmlrpc/client.py", line 1096, in __call__ return self.__send(self.__name, args) ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 125, in _ServerProxy__request ret = ServerProxy._ServerProxy__request( self, methodname, (authparams,)) File "/usr/lib64/python3.14/xmlrpc/client.py", line 1435, in __request response = self.__transport.request( self.__host, ...<2 lines>... verbose=self.__verbose ) File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 100, in request return self.__request_helper(url, request_body) ~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 47, in __request_helper return self.parse_response(response) ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^ File "/usr/lib/python3.14/site-packages/bugzilla/_backendxmlrpc.py", line 84, in parse_response return unmarshaller.close() ~~~~~~~~~~~~~~~~~~^^ File "/usr/lib64/python3.14/xmlrpc/client.py", line 642, in close raise Fault(**self._stack[0]) xmlrpc.client.Fault: <Fault 113: 'Sorry, but you are not allowed to (un)mark comments or attachments as private.'>

Reproducible: Always

Steps to Reproduce:
Create a bug report through webUI with a non redhat account.

Comment 1 Katerina Koukiou 2026-02-27 13:05:05 UTC
Upstream fix: https://github.com/rhinstaller/anaconda-webui/pull/1190

Comment 2 Kamil Páral 2026-02-27 13:38:51 UTC
For a video demonstration, see attachment 2129104 [details] .

Proposing as F44 blocker:
https://fedoraproject.org/wiki/Basic_Release_Criteria#Failure_reporting

Comment 3 Adam Williamson 2026-02-27 18:36:41 UTC
+3 in https://pagure.io/fedora-qa/blocker-review/issue/2062 , marking accepted. I will backport this fix so we can get it in a candidate compose today.

Comment 4 Fedora Update System 2026-02-27 19:40:08 UTC
FEDORA-2026-48bfc8a951 (anaconda-webui-66-2.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-48bfc8a951

Comment 5 Fedora Update System 2026-02-28 00:49:59 UTC
FEDORA-2026-48bfc8a951 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-48bfc8a951`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-48bfc8a951

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.


Note You need to log in before you can comment on or make changes to this bug.