Red Hat Bugzilla – Bug 493711
Software Channel ACL, normal user can click on "manage software channels"
Last modified: 2010-10-23 04:46:44 EDT
Description of problem:
1. create a custom channel
2. make the channel protected
3. create a normal user
4. add that user as a subscriber to the channel
5. log in as the normal user
6. click channels, manage software channels
The link for manage software channels should NOT be present for a normal user
Created attachment 337878 [details]
Created attachment 337879 [details]
go to channel
check the option - Only selected users within your organization may subscribe to this channel.
I wasn't able to reproduce this on Spacewalk 0.5. Just to be safe, I subscribed the user through both the channel's subscriber tab and User -> <user> -> Channel Permissions and both worked correctly.
Created attachment 338558 [details]
Normal user Channels tab (see left nav)
Created attachment 338560 [details]
Normal user clicking Manage Channels
Pitching to QA to check again.
looks good now
verified in main org and new org
I still can see the link "manage software channels" but when I click it I did not get permission error, but normal page with empty list of channels are presented.(as described in #6)
Which seem to be correct.
verified in stage.
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.