Bug 738337 - a user without permission to "manage repositories" can create a new repository
Summary: a user without permission to "manage repositories" can create a new repository
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: RHQ Project
Classification: Other
Component: Core UI
Version: 4.1
Hardware: Unspecified
OS: Unspecified
urgent
medium
Target Milestone: ---
: ---
Assignee: Heiko W. Rupp
QA Contact: Mike Foley
URL:
Whiteboard:
Depends On:
Blocks: jon30-bugs rhq42
TreeView+ depends on / blocked
 
Reported: 2011-09-14 15:09 UTC by Mike Foley
Modified: 2011-09-29 15:07 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2011-09-29 15:07:15 UTC
Embargoed:

Attachments (Terms of Use)

Description Mike Foley 2011-09-14 15:09:17 UTC 
Description of problem:  a user without permission to "manage repositories" can create a new repository


Version-Release number of selected component (if applicable):
rhq 4.1 09/14/2011 build

How reproducible:
100%

Steps to Reproduce:
1.  assign a role to a user without "manage repositories" permission
2.  login with this user.  create a repository
3.
  
Actual results:
ability to create a repository

Expected results:
not able to create a repository

Additional info:
Comment 1 Mike Foley 2011-09-29 13:11:33 UTC 
Additional info:  to create a repository ... the keystrokes are  Administration top-level menu, Repository (on lower left side of page), then Create New Button.
Comment 2 Lukas Krejci 2011-09-29 15:07:15 UTC 
This is by design.

http://docs.redhat.com/docs/en-US/JBoss_Operations_Network/3.0/html/Basic_Admin_Guide/managing-packages.html#content-authz
Note You need to log in before you can comment on or make changes to this bug.