Bug 535141 - (RHQ-1868) test global permission: manage inventory
test global permission: manage inventory
Product: RHQ Project
Classification: Other
Component: No Component (Show other bugs)
All All
high Severity medium (vote)
: ---
: ---
Assigned To: John Mazzitelli
: SubTask
Depends On:
Blocks: RHQ-1848
  Show dependency treegraph
Reported: 2009-03-26 13:34 EDT by John Mazzitelli
Modified: 2009-11-10 16:22 EST (History)
0 users

See Also:
Fixed In Version: 1.2
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description John Mazzitelli 2009-03-26 13:34:00 EDT
check manage inventory permission - this allows you to commit resources into inventory, uninventory resources.

it also lets you view all resources.

I can't remember if this gives you access to all other permissions for resources.
Comment 1 John Mazzitelli 2009-03-26 17:01:37 EDT
svn rev3541 - disallow a non-permitted user to see the new user and new role links on Administration page. Only MANAGE_SECURITY users should see those.
Comment 2 John Mazzitelli 2009-03-26 17:05:51 EDT
auto-discovery portlet is empty and doesn't allow me to import if i don't have permission. Also, I tried to sneakily go to the queue.xhtml page and I got a permission error. all of this is good.
Comment 3 John Mazzitelli 2009-03-26 17:19:24 EDT
going through all the links on Admin page.

the manage plugins allows non MANAGE_INVENTORY users to see it and upload plugins - this needs to be fixed
Comment 4 John Mazzitelli 2009-03-27 17:15:16 EDT
manage plugins needs to be MANAGE_SETTINGS, not inventory. this will be fixed.
Comment 5 Red Hat Bugzilla 2009-11-10 15:48:26 EST
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-1868

Note You need to log in before you can comment on or make changes to this bug.