Description of problem:
Subscribe system to Configuration Channels cause 'Permission Error'

Version-Release number of selected component (if applicable):
sat531

How reproducible:
always

Steps to Reproduce:
1. have a system with ONLY Entitlements:  [Management] 
2. select this system and use it in SSM
3. SSM: pick 'config channel subscriptions' link
4. SSM: Step 1: Select Channels for Subscription.
5. SSM: Step 2: Rank Channels for Subscription.
# select whatever
6. Step 3: Confirm Channels for Subscription.

Actual results:

Permission Error.

You do not have the appropriate permission set to access the requested page. You may have reached this error page in one of several ways:
...
..
.

Expected results:
write than you haven't permission to add system to config channel or some message. When there are more systems then add to 'config channel' all other systems.

Additional info:
if one of your system in SSM is only with Management Entitlements then you don't know where is problem and it causes mess.

tail -f /var/log/tomcat5/catalina.out:

2009-11-19 17:58:15,619 [TP-Processor2] ERROR com.redhat.rhn.common.errors.PermissionExceptionHandler - Permission Error
com.redhat.rhn.common.security.PermissionException: Config feature needs to be enabled on the server for handling Config Management. The provided server [com.redhat.rhn.domain.server.Server@47fd47fd[id=1000010266,org=com.redhat.rhn.domain.org.OrgImpl@76b476b4[id=2,name=psklenar],name=xen48.englab.brq.redhat.com,description=Initial Registration Parameters:
OS: redhat-release
Release: 5Client
CPU Arch: i686-redhat-linux]] does not have have this enabled. Add provisioning capabilities to the system to enable this..
	at com.redhat.rhn.manager.configuration.ConfigurationManager.ensureConfigManageable(ConfigurationManager.java:2117)
	at com.redhat.rhn.domain.server.Server.ensureConfigManageable(Server.java:287)
	at com.redhat.rhn.domain.server.Server.getConfigChannels(Server.java:273)
	at com.redhat.rhn.frontend.action.configuration.ssm.SubscribeConfirm.subscribeServer(SubscribeConfirm.java:163)
	at com.redhat.rhn.frontend.action.configuration.ssm.SubscribeConfirm.confirm(SubscribeConfirm.java:137)
	at com.redhat.rhn.frontend.action.configuration.ssm.SubscribeConfirm.execute(SubscribeConfirm.java:80)
	at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431)
	at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:237)
	at com.redhat.rhn.frontend.struts.RhnRequestProcessor.process(RhnRequestProcessor.java:82)
	at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
	at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at com.redhat.rhn.frontend.servlets.AuthFilter.doFilter(AuthFilter.java:73)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage(PageFilter.java:142)
	at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(PageFilter.java:58)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at com.redhat.rhn.frontend.servlets.LocalizedEnvironmentFilter.doFilter(LocalizedEnvironmentFilter.java:67)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at com.redhat.rhn.frontend.servlets.EnvironmentFilter.doFilter(EnvironmentFilter.java:108)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at com.redhat.rhn.frontend.servlets.SessionFilter.doFilter(SessionFilter.java:55)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at com.redhat.rhn.frontend.servlets.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:97)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)
	at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
	at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
	at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:775)
	at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:704)
	at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:897)
	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685)
	at java.lang.Thread.run(Thread.java:735)