Description of problem: If a role has only 'Manage bundles' permission, user assigned to this role is not able to see the link Administrator->Content after login to jon. Version-Release number of selected component (if applicable): jon-2.4.0.GA_QA How reproducible: always Steps to Reproduce: 1. Go to Administration->Security->Roles 2. Click on button 'New' to create a new role. 3. Enter a role name and check the check box 'Manage bundles' in 'Global Permissions' section. 4. Do not check any other checkbox. 5. Click on OK button. 5. Create a new user(testuser) and add user to the role created in step #4. 6. Login to jon with the user(testuser) 7. Try to acess Administrator->Content->Bundles link. Actual results: User is not able to see the link Administrator->Content Expected results: User should be able to see the Content page and manage the bundles. Additional info: If a role has 'Manage inventory' permission and 'Manage bundles' permission, a user assigned to that role is able to access Administrator->Content->Bundles link.
Fixed by commit 074d5c2, which has been pushed to the release-3.0.0 branch. Now a user with the Bundle perm can view Content>Bundles menu item, but a user with the Inventory perm and not the Bundle perm cannot. Here's the relevant blurb from menu.xhtml: <ui:remove>***** Administration > CONTENT *****</ui:remove> <rich:menuGroup value="Content" rendered="#{GlobalPermissionsUIBean.inventory || GlobalPermissionsUIBean.bundle}"> <rich:menuItem submitMode="none" onclick="window.location = '/coregui/CoreGUI.html#Bundles'" rendered="#{GlobalPermissionsUIBean.bundle}"> <h:outputText value="Bundles"/> </rich:menuItem> <rich:menuItem submitMode="none" onclick="window.location = '/rhq/content/listContentProviders.xhtml'" rendered="#{GlobalPermissionsUIBean.inventory}"> <h:outputText value="Content Sources"/> </rich:menuItem> <rich:menuItem submitMode="none" onclick="window.location = '/rhq/content/listRepos.xhtml'" rendered="#{GlobalPermissionsUIBean.inventory}"> <h:outputText value="Repositories"/> </rich:menuItem> </rich:menuGroup>
Verified on jon-2.4.0.GA_QA build#52 User assigned to a role having only manage bundles permissions is able to access Content>Bundles. A a user having the Inventory permission and without the Bundle permission cannot access Content>Bundles.
Mass-closure of verified bugs against JON.