Description of problem: Clicking on Summary->Timeline tab of a resource by a user without config read permission displays a pop up displaying below message : "Failed to load json data from /resource/common/monitor/events/EventConfigJSON.jsp?id=10001&begin=1318390713800&end=1318419513800 Internal Server Error". when user tries to navigate away and clicks on any tab or sub tab of the platform resource, the pop up still displays. The server log displays PermissionException. Please refer the attached screenshot and the server log. Version-Release number of selected component (if applicable): Build#510 (Version: 4.1.0-SNAPSHOT Build Number: 0a0e373) Tested on Firefox versions '3.6.3' and '3.0.15'. How reproducible: Always Steps to Reproduce: 1. Login to rhq as rhqadmin. 2. Create a user 3. Create a compatible group of resorce (Ex: RHQ Agent) 4. Create a role without 'Configure' resource permissions. (Or default permissions) 5. Assign user and compatible group to the role created. 6. Login as the user 7. Navigate to 'Inventory menu'->Servers->resource name (RHQ Agent) 8. Click on the 'Summary->Timeline' tab Actual results: It displays a pop up displaying a message 'Failed to load json data' and the server log displays PermissionException. Expected results: No exception and pop up message should be displayed. Additional info: This bug is not reproducible when user has configure read permissions.
Created attachment 527690 [details] Screenshot
Created attachment 527691 [details] ServerLog
in our EventJSON jsps that serve the JSON data, we need to wrap in try-catch block so as not to blow up the Timeline component. I have this fixed on my local branch, will push once master is unfrozen
git commit: release_jon3.x: 3d74362f9ea99bb0dd8a66ec85c012bbae6002df master: fb1c12b52f9fc5e5ec98af36fbb669658f8f4380
Verified on build#672 (Version: 4.3.0-SNAPSHOT Build Number: ca0281f) Followed the steps and verified that it does not display any exception and pop up message navigating to Summary->Timeline tab of a resource by a user without config read permission.
marking VERIFIED JON 3 bugs to CLOSED/CURRENTRELEASE
changing status of VERIFIED BZs for JON 2.4.2 and JON 3.0 to CLOSED/CURRENTRELEASE