Created attachment 572768 [details] images Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1.Created two users say UserA with only "global Profile user" and UserB with only 'global provider admin" role 2. Login to conductor with above user details 3. Go to clouds -> image (pfa: top-level_image_list.png) 4. From "cloud" page click on "default" cloud, move to 'images' section (Images.png) Actual results: Observed that all the image from 'default' cloud was listed at step 4 Expected results: So it is expected to show those image list in "Image" section also (this is help to keep the consistency across page) Additional info: rpm -qa | grep aeolus aeolus-conductor-0.8.3-1.el6.noarch aeolus-conductor-daemons-0.8.3-1.el6.noarch rubygem-aeolus-image-0.3.0-12.el6.noarch aeolus-configure-2.5.2-1.el6.noarch aeolus-all-0.8.3-1.el6.noarch rubygem-aeolus-cli-0.3.1-1.el6.noarch aeolus-conductor-doc-0.8.3-1.el6.noarch
Created attachment 572769 [details] top_level_image_list
In src/app/views/images/_list.html.haml, line 13 is enforcing too-strict permissions: - if environment.nil? or check_privilege(Privilege::USE, PoolFamily, environment) PoolFamily USE is what we require for image building/pushing/etc. PoolFamily VIEW should be sufficient for this list, since that's the same permission we enforce at page level to provide access to the image list for an environment/cloud.