Bug 806933 - Failed to list the images(in top level image view) for users
Summary: Failed to list the images(in top level image view) for users
Keywords:
Status: CLOSED EOL
Alias: None
Product: CloudForms Cloud Engine
Classification: Retired
Component: aeolus-conductor
Version: 1.0.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: rc
Assignee: Angus Thomas
QA Contact: Rehana
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-03-26 14:31 UTC by Rehana
Modified: 2020-03-27 17:58 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-03-27 17:58:54 UTC
Embargoed:


Attachments (Terms of Use)
images (206.96 KB, image/png)
2012-03-26 14:31 UTC, Rehana
no flags Details
top_level_image_list (190.46 KB, image/png)
2012-03-26 14:31 UTC, Rehana
no flags Details

Description Rehana 2012-03-26 14:31:10 UTC
Created attachment 572768 [details]
images

Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.Created two users say UserA with only "global Profile user" and UserB with only 'global provider admin" role
2. Login to conductor with above user details
3. Go to clouds -> image (pfa: top-level_image_list.png)
4. From "cloud" page click on "default" cloud, move to 'images' section (Images.png)

Actual results:
Observed that all the image from 'default' cloud was listed at step 4


Expected results:
So it is expected to show those image list in "Image" section also (this is help to keep the consistency across page) 


Additional info:

rpm -qa | grep aeolus
aeolus-conductor-0.8.3-1.el6.noarch
aeolus-conductor-daemons-0.8.3-1.el6.noarch
rubygem-aeolus-image-0.3.0-12.el6.noarch
aeolus-configure-2.5.2-1.el6.noarch
aeolus-all-0.8.3-1.el6.noarch
rubygem-aeolus-cli-0.3.1-1.el6.noarch
aeolus-conductor-doc-0.8.3-1.el6.noarch

Comment 1 Rehana 2012-03-26 14:31:48 UTC
Created attachment 572769 [details]
top_level_image_list

Comment 2 Scott Seago 2012-03-26 14:52:05 UTC
In src/app/views/images/_list.html.haml, line 13 is enforcing too-strict permissions:
  - if environment.nil? or check_privilege(Privilege::USE, PoolFamily, environment)

PoolFamily USE is what we require for image building/pushing/etc. PoolFamily VIEW should be sufficient for this list, since that's the same permission we enforce at page level to provide access to the image list for an environment/cloud.


Note You need to log in before you can comment on or make changes to this bug.