Bug 806933 - Failed to list the images(in top level image view) for users
Failed to list the images(in top level image view) for users
Status: NEW
Product: CloudForms Cloud Engine
Classification: Red Hat
Component: aeolus-conductor (Show other bugs)
Unspecified Unspecified
unspecified Severity medium
: rc
: ---
Assigned To: Angus Thomas
: Triaged
Depends On:
  Show dependency treegraph
Reported: 2012-03-26 10:31 EDT by Rehana
Modified: 2014-01-05 13:35 EST (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
images (206.96 KB, image/png)
2012-03-26 10:31 EDT, Rehana
no flags Details
top_level_image_list (190.46 KB, image/png)
2012-03-26 10:31 EDT, Rehana
no flags Details

  None (edit)
Description Rehana 2012-03-26 10:31:10 EDT
Created attachment 572768 [details]

Description of problem:

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.Created two users say UserA with only "global Profile user" and UserB with only 'global provider admin" role
2. Login to conductor with above user details
3. Go to clouds -> image (pfa: top-level_image_list.png)
4. From "cloud" page click on "default" cloud, move to 'images' section (Images.png)

Actual results:
Observed that all the image from 'default' cloud was listed at step 4

Expected results:
So it is expected to show those image list in "Image" section also (this is help to keep the consistency across page) 

Additional info:

rpm -qa | grep aeolus
Comment 1 Rehana 2012-03-26 10:31:48 EDT
Created attachment 572769 [details]
Comment 2 Scott Seago 2012-03-26 10:52:05 EDT
In src/app/views/images/_list.html.haml, line 13 is enforcing too-strict permissions:
  - if environment.nil? or check_privilege(Privilege::USE, PoolFamily, environment)

PoolFamily USE is what we require for image building/pushing/etc. PoolFamily VIEW should be sufficient for this list, since that's the same permission we enforce at page level to provide access to the image list for an environment/cloud.

Note You need to log in before you can comment on or make changes to this bug.