Bug 719632 - Satellite 5.4.1: System Search UI returns 403 error "Request does not contain a CSRF security token" after applying errata
Summary: Satellite 5.4.1: System Search UI returns 403 error "Request does not contain...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Spacewalk
Classification: Community
Component: WebUI
Version: 1.5
Hardware: All
OS: Linux
urgent
high
Target Milestone: ---
Assignee: Milan Zázrivec
QA Contact: Red Hat Satellite QA List
URL:
Whiteboard:
Depends On: 719504 722460
Blocks: space15
TreeView+ depends on / blocked
 
Reported: 2011-07-07 14:20 UTC by Milan Zázrivec
Modified: 2011-07-21 14:43 UTC (History)
3 users (show)

Fixed In Version:
Clone Of: 719504
Environment:
Last Closed: 2011-07-21 14:43:07 UTC
Embargoed:


Attachments (Terms of Use)

Description Milan Zázrivec 2011-07-07 14:20:01 UTC
+++ This bug was initially created as a clone of Bug #719504 +++

Description of problem:
Cu is getting 403 / "Request does not contain a CSRF security token" error when searching in the webUI after applying https://rhn.redhat.com/errata/RHSA-2011-0879.html, which addresses https://bugzilla.redhat.com/show_bug.cgi?id=529483. 
From customer: "For example if I simply opened system group I can select all systems in a list or go to the next page. But if the same systems were found with search : Go, Display, Update List,Select All buttons [on the search results page] give me 403 error."

Version-Release number of selected component (if applicable):
Red Hat Network (RHN) Satellite 5.4.1

How reproducible:
Always.

Steps to Reproduce:
1. Have a satellite with https://rhn.redhat.com/errata/RHSA-2011-0879.html applied (i.e., Satellite 5.4.1).
2. Enter a search term in web UI that results in some systems being found - e.g., use System Search with string "dhcp".
3. On the resulting results page with some systems found, try to click on any of the buttons: Go, Display, Update List, Select All.

Actual results:
"HTTP Status 403 - Request does not contain a CSRF security token

type Status report

message Request does not contain a CSRF security token

description Access to the specified resource (Request does not contain a CSRF security token) has been forbidden.
Apache Tomcat/6.0.24"

Expected results:
No error, operation succeeds.

Additional info:
N/A

Comment 1 Milan Zázrivec 2011-07-07 14:22:44 UTC
spacewalk.git master: 416385d5d8fbda23ccf3af506e790ffae330e3e5

Comment 2 Jan Pazdziora (Red Hat) 2011-07-19 19:36:41 UTC
This bugzilla is currently MODIFIED, so we believe the fix is in the Spacewalk nightly yum repository at http://spacewalk.redhat.com/yum/nightly/

Therefore, moving ON_QA.

Comment 3 Jan Pazdziora (Red Hat) 2011-07-21 14:43:07 UTC
Spacewalk 1.5 was released.


Note You need to log in before you can comment on or make changes to this bug.