Bug 794740 - Autorefresh circumvents the Deployments list permissions
Summary: Autorefresh circumvents the Deployments list permissions
Keywords:
Status: CLOSED DUPLICATE of bug 788048
Alias: None
Product: CloudForms Cloud Engine
Classification: Retired
Component: aeolus-conductor
Version: 1.0.0
Hardware: All
OS: All
unspecified
high
Target Milestone: rc
Assignee: Imre Farkas
QA Contact: wes hayutin
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-17 13:57 UTC by Tomas Sedovic
Modified: 2016-09-20 05:02 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-23 15:08:12 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Tomas Sedovic 2012-02-17 13:57:01 UTC 
Steps to Reproduce:
1. Launch several applications as the Admin user
2. Create a new user with default privileges
3. Log in as the new user
4. Select the Monitor tabs
5. Note that none of the Admin's applications are shown
6. Wait 1 minute

Actual results:
Deployments that the user has no privileges to see are loaded by the auto-refresh mechanism.

Expected results:
Only the deployments the user has rights to see should be loaded.

Additional info:
The same thing happens on the Pool Details page (click on any pool, wait a minute, the deployments will show up).
Comment 1 Hugh Brock 2012-02-23 15:08:12 UTC 

*** This bug has been marked as a duplicate of bug 788048 ***
Note You need to log in before you can comment on or make changes to this bug.