Bug 535341 (RHQ-2047) - Context menu in left nav offers executing operations on a resource even if the user doesn't have privs
Summary: Context menu in left nav offers executing operations on a resource even if th...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: RHQ-2047
Product: RHQ Project
Classification: Other
Component: No Component
Version: 1.2
Hardware: All
OS: All
low
medium
Target Milestone: ---
: ---
Assignee: RHQ Project Maintainer
QA Contact:
URL: http://jira.rhq-project.org/browse/RH...
Whiteboard:
Depends On:
Blocks: rhq_triage rhq4
TreeView+ depends on / blocked
 
Reported: 2009-04-30 16:12 UTC by Lukas Krejci
Modified: 2013-09-02 07:19 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2013-09-02 07:19:48 UTC
Embargoed:

Attachments (Terms of Use)
Screenshot (58.58 KB, image/png)
2011-06-07 08:28 UTC, Sunil Kondkar 		no flags Details
View All

Description Lukas Krejci 2009-04-30 16:12:00 UTC 
The operations tab of a resource doesn't offer to execute the operations if the user doesn't have the permissions.

We should not offer to execute the operations from the context menu either.
Comment 1 Red Hat Bugzilla 2009-11-10 20:56:39 UTC 
This bug was previously known as http://jira.rhq-project.org/browse/RHQ-2047
Comment 2 wes hayutin 2010-02-16 16:54:58 UTC 
Temporarily adding the keyword "SubBug" so we can be sure we have accounted for all the bugs.

keyword:
new = Tracking + FutureFeature + SubBug
Comment 3 wes hayutin 2010-02-16 17:00:14 UTC 
making sure we're not missing any bugs in rhq_triage
Comment 4 Sunil Kondkar 2011-06-07 08:26:23 UTC 
Verified on build#116 (Version: 4.1.0-SNAPSHOT Build Number: 6ae3b13)

Created a role without control-write permissions and assigned a resource group and a user to the role. The resource left navigation context menu displays the Operations option greyed out for the user without control-write permissions. Please refer the attached screenshot.

Also verified this on the compatible groups context menu. For a user without permissions, the Operation option is greyed out in the context menu in the left navigation.
 
Marking as verified.
Comment 5 Sunil Kondkar 2011-06-07 08:28:45 UTC 
Created attachment 503406 [details]
Screenshot
Comment 6 Heiko W. Rupp 2013-09-02 07:19:48 UTC 
Bulk closing of issues that were VERIFIED, had no target release and where the status changed more than a year ago.
Note You need to log in before you can comment on or make changes to this bug.