Red Hat Bugzilla – Bug 642546
Empty config fields are editable for a user having only config_read permission
Last modified: 2013-08-05 20:38:19 EDT
Description of problem:
If a user has only config_read permission and navigates to configuration tab of a resource like 'RHQ Agent', the empty config properties are editable. If user enters value in any of such properties, save button also gets enabled.
Please refer the attached screenshot.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1.Login to Jon
2.Create a group of resources like rhq agent etc
3.Create a role having only view config permisions and assign the resource group created.
4.Create a new user and assign the role created above
5.Login to Jon as newly created user
6.Navigate to 'Inventory->Servers->RHQ Agent->Configuration->Current' tab.
7.Uncheck the ckeckbox for a empty config property say 'Server Discovery Period'.
8.Enter a value in the text box (Ex: 30)
9.Notice the 'Save' button is enabled.
The empty config fields are editable for a user having only config_read permission.
User having only config_read permission should be able to only view the individual configuration values. The config properties should not be editable.
Created attachment 453157 [details]
Fixed - [master d27c97e]. The underlying cause was fault logic in
Verified on Build#1063 (Version: 4.0.0-SNAPSHOT Build Number: f86ed17)
User having only config_read permission is able to only view the individual configuration values.
Marking as verified.
Bookkeeping - closing bug - fixed in recent release.