Bug 784904 - user with register system permission unable to upload list of system packages
Summary: user with register system permission unable to upload list of system packages
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Content Management
Version: 6.0.0
Hardware: Unspecified
OS: Unspecified
high
medium vote
Target Milestone: Unspecified
Assignee: Tom McKay
QA Contact: Katello QA List
URL:
Whiteboard:
Depends On:
Blocks: katello-blockers
TreeView+ depends on / blocked
 
Reported: 2012-01-26 15:43 UTC by Tom McKay
Modified: 2019-09-26 13:29 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-08-22 18:23:06 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Tom McKay 2012-01-26 15:43:43 UTC 
Description of problem:

After a system registers with subscription-manager, it immediately PUTs its packages. This api call has permissions that prevent a user with merely "register systems" permissions from calling it.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:
Comment 1 Tom McKay 2012-01-26 16:24:47 UTC 
commit cfd1b939d6b3ecd94ac6779ed10d220c51dc0809
Author: Tom McKay <thomasmckay>
Date:   Thu Jan 26 11:20:13 2012 -0500

    784904 - a user with register permission can upload systems packages

To test, create a user with just a default org/env set, no other roles. Use this user to register a system, then visit the Packages tab of the system and note that the packages are now listed.
Comment 2 Mike McCune 2012-01-26 19:08:26 UTC 
mass ON_QA move
Comment 4 Corey Welton 2012-02-10 13:56:54 UTC 
QA Verified. System registered with a user whom otherwise has no other permissions results in proper registration and package list
Comment 5 Lukas Zapletal 2012-02-14 15:55:14 UTC 
REOPEN, does not work on vanilla rhsm from RHEL 6.2 (no updates applied):

https://bugzilla.redhat.com/show_bug.cgi?id=786155
Note You need to log in before you can comment on or make changes to this bug.