Created attachment 441068 [details]
Relevant server log in debug mode with error at 2010-08-26 02:22:19,078

Description of problem:
A user who has a role which contains a compatible group definition with Tomcat Server resources is unable to see any metric graphs and when selecting the Tables view the following error is displayed:

QueryParameterException
could not locate named parameter [subject]
You can view the stack trace, return to the previous page, Dashboard, or Browse Resources page.

The following stack trace is also available in the UI:

javax.el.ELException: /rhq/common/monitor/tables.xhtml @52,103 value="#{MetricsTableUIBean.metricSummaries}": Error reading 'metricSummaries' on type org.rhq.enterprise.gui.measurement.tables.MetricsTableUIBean
javax.faces.FacesException: javax.el.ELException: /rhq/common/monitor/tables.xhtml @52,103 value="#{MetricsTableUIBean.metricSummaries}": Error reading 'metricSummaries' on type org.rhq.enterprise.gui.measurement.tables.MetricsTableUIBean


Complete stack can be found in attached log snippet.

Version-Release number of selected component (if applicable):
3.0.0

How reproducible:
Always

Steps to Reproduce:
   #  Install and configure JON 2.4
   #  Install Tomcat (test case used tomcat5 RPM 5.5.23 from RHEL5 repository)
   #  Add Tomcat to inventory (test case imported Tomcat manually)
   #  Create a new user account (Administration -> Security -> Users >> New...):
         Name:             My User
         Email:            myuser
         Password:         123456
         Enable Login:     Yes
         Username:         myuser
   #  Create new resource group (Groups -> New Group Definition):
         Name:             Tomcat Servers
         Recursive:        Yes
   #  Add group definition condition:
         Group Definition Conditions:
            groupby resource.parent.trait[Trait.hostname]
            resource.type.plugin=Tomcat
            resource.type.name=Tomcat Server
   #  Calculate groups
   #  Confirm that at least one group was created containing at least 1 child
   #  Create a new role (Administration -> Security -> Roles >> New...):
         Name:             Tomcat Managers
         Manage bundles:   Yes
         Modify            Yes
         Delete            Yes
         Create Children   Yes
         Alert             Write
         Measure           Write
         Content           Write
         Control           Write
         Configure         Read
   #  Add user to new role (Assigned Users >> Add To List...):
         Users:            myuser
   #  Add group(s) to new role (Assigned Resource Groups >> Add To List...):
         Groups:           DynaGroup - Tomcat Servers ( hostname )
   #  Navigate to Resources -> Servers
   #  Click on Tomcat Server resource
   #  Expand and select Tomcat Server resource -> Tomcat Connector
   #  Select Monitor -> Graphs tab
   #  Verify Tomcat Connector resource is available and graphs are being displayed (TomcatConnector_Monitor-Graphs_rhqadmin.png)
   #  Select Monitor -> Tables tab
   #  Verify tables are being displayed with data (TomcatConnector_Monitor-Tables_rhqadmin.png)
   #  Logout
   #  Login as myuser/123456
   #  Navigate to Resources -> Servers
   #  Click on Tomcat Server resource
   #  Expand and select Tomcat Server resource -> Tomcat Connector
   #  Select Monitor -> Graphs tab
   #  Notice that availability appears but graphs do not (TomcatConnector_Monitor-Graphs_myuser.png)
   #  Select Monitor -> Tables tab
   #  Notice the "QueryParameterException could not locate named parameter [subject]" error message (TomcatConnector_Monitor-Tables_myuser.png)
      Relevant server log at debug is attached (rhq-server-debug.log)
  
Actual results:
Non-superuser sees no Tomcat AutoGroup metric graphs and strange exception when attempting to view metric tables.

Expected results:
Metric graphs and metric tables as non-superuser

Additional info:
This issue may not be limited to the AutoGroup displays of a Tomcat server and may not occur if other role permissions are used.  The testing was limited to this specific use-case.