Red Hat Bugzilla – Bug 469067
System Set channel manipulation without org admin status: Permission Denied.
Last modified: 2009-08-18 03:06:29 EDT
Description of problem:
If a user attempts to switch a group of machines from channel to channel via the system set interface without Org Admin permissions gets a 'permission denied screen. When the user is given Org Admin status, the channel manipulation tool works correctly, and a user is able to move machines from channel to channel
Version-Release number of selected component (if applicable):5.1.1
How reproducible: Always
Steps to Reproduce:
1.Create a system set of machines with a user with all permissions except org admin status and satellite admin status.
2.in the page: network/systems/ssm/index.pxt, click on the Manage systems' channel memberships link.
Actual results: User gets a Permission denied page.
Expected results:User should get the page: rhn/channel/ssm/ChildSubscriptions.do
which allows the user to Alter subscriptions for each machine.
Additional info:If user is given org admin privileges, they are able to do the task as expected.
Going to have a review. I wonder if this is a user needs group admin rights to perform this action. Obviously maybe we should not display the page to then hit the permission denied page.
this fix has been made in spacewalk 0.4 as #468302
*** This bug has been marked as a duplicate of bug 468302 ***
Closed as a duplicate of the wrong bug. It should be bug 467945
*** This bug has been marked as a duplicate of bug 467945 ***