Create a user with a single permission of "Read Systems in Environment" and choose an environment. Now login as that user and visit Systems All; note that all systems are indeed visible. Going to Systems By Environments tab does work as expected, limiting environment selector to proper setting.
Should be fixed as of http://git.fedorahosted.org/git/?p=katello.git;a=commit;h=f0551258e7dd3583e38e3937519fb4610d4b920c
mass ON_QA move
# VERIFIED Preparing a scenario in a following way (having in advance 2 environments: Dev & Test for the ACME_Corporation): --- *user_role* Name: Read Systems only *permission* Name: Read Systems only Scope: environments Verbs: read_systems Tags: Dev *user list_roles --username user_system_only -v* Name: Read Systems only --- so idea is: create user and assign a user role which has a permission of read_systems for the environment "Dev" only (there is used pure CLI only ;)) Then with user admin register 2 systems: for each env. one. try to list systems by having user_system_only user logged in (UI) properly shown only a system registered to the Dev. Checked against: --- katello-0.1.228-1.git.5.eabe87d.el6.noarch katello-cli-0.1.54-1.git.0.2670189.el6.noarch subscription-manager-0.99.6-1.el6.x86_64 pulp-0.0.265-1.el6.noarch candlepin-0.5.8-1.el6.noarch
Automated in method "com.redhat.qe.katello.tests.e2e.SystemListAccess.test_listSystem()"