Bug 535341 (RHQ-2047) - Context menu in left nav offers executing operations on a resource even if the user doesn't have privs
Summary: Context menu in left nav offers executing operations on a resource even if th...
Alias: RHQ-2047
Product: RHQ Project
Classification: Other
Component: No Component
Version: 1.2
Hardware: All
OS: All
medium vote
Target Milestone: ---
: ---
Assignee: RHQ Project Maintainer
QA Contact:
URL: http://jira.rhq-project.org/browse/RH...
Depends On:
Blocks: rhq_triage rhq4
TreeView+ depends on / blocked
Reported: 2009-04-30 16:12 UTC by Lukas Krejci
Modified: 2013-09-02 07:19 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2013-09-02 07:19:48 UTC

Attachments (Terms of Use)
Screenshot (58.58 KB, image/png)
2011-06-07 08:28 UTC, Sunil Kondkar
no flags Details

Description Lukas Krejci 2009-04-30 16:12:00 UTC
The operations tab of a resource doesn't offer to execute the operations if the user doesn't have the permissions.

We should not offer to execute the operations from the context menu either.

Comment 1 Red Hat Bugzilla 2009-11-10 20:56:39 UTC
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-2047

Comment 2 wes hayutin 2010-02-16 16:54:58 UTC
Temporarily adding the keyword "SubBug" so we can be sure we have accounted for all the bugs.

new = Tracking + FutureFeature + SubBug

Comment 3 wes hayutin 2010-02-16 17:00:14 UTC
making sure we're not missing any bugs in rhq_triage

Comment 4 Sunil Kondkar 2011-06-07 08:26:23 UTC
Verified on build#116 (Version: 4.1.0-SNAPSHOT Build Number: 6ae3b13)

Created a role without control-write permissions and assigned a resource group and a user to the role. The resource left navigation context menu displays the Operations option greyed out for the user without control-write permissions. Please refer the attached screenshot.

Also verified this on the compatible groups context menu. For a user without permissions, the Operation option is greyed out in the context menu in the left navigation.
Marking as verified.

Comment 5 Sunil Kondkar 2011-06-07 08:28:45 UTC
Created attachment 503406 [details]

Comment 6 Heiko W. Rupp 2013-09-02 07:19:48 UTC
Bulk closing of issues that were VERIFIED, had no target release and where the status changed more than a year ago.

Note You need to log in before you can comment on or make changes to this bug.