Hide Forgot
Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. Login as admin and create a non-admin user. 2. add hardware profile. 3.login as non-admin user and verify if non-admin user is able to view/edit or delete hardware profile Currently non admin user is able to view hardware profiles. Expected results: Non-admin user should not be able to view/edit/delete hardware profile Additional info: [root@kvm-guest-06 nodes]# rpm -qa | grep aeolus aeolus-conductor-0.4.0-0.20110919181505git369190d.fc15.noarch aeolus-conductor-daemons-0.4.0-0.20110919181505git369190d.fc15.noarch aeolus-conductor-doc-0.4.0-0.20110919181505git369190d.fc15.noarch rubygem-aeolus-image-0.1.0-3.20110919115936gitd1d24b4.fc15.noarch aeolus-configure-2.0.2-4.20110916125556git5a94390.fc15.noarch aeolus-all-0.4.0-0.20110919181505git369190d.fc15.noarch
fixed in commit 9428d6e73858ae20154057319e9371b5c0ce8416
making sure all the bugs are at the right version for future queries
Permissions are now enforced for Hardware Profiles. Non-admin user is not able to view/edit or delete hardware profile. verified on: [root@kvm-guest-03 templates]# rpm -qa | grep aeolus rubygem-aeolus-image-0.1.0-3.20111003170706git8f23238.fc15.noarch aeolus-conductor-0.4.0-0.20111004192348git2cf5ee6.fc15.noarch aeolus-all-0.4.0-0.20111004192348git2cf5ee6.fc15.noarch aeolus-configure-2.0.2-4.20111004160858gitaf7e59a.fc15.noarch aeolus-conductor-doc-0.4.0-0.20111004192348git2cf5ee6.fc15.noarch aeolus-conductor-daemons-0.4.0-0.20111004192348git2cf5ee6.fc15.noarch rubygem-aeolus-cli-0.1.0-3.20111003133323git9451323.fc15.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHEA-2012-0583.html