Red Hat Bugzilla – Bug 839008
Indirect roles not checked for in WebUI
Last modified: 2013-02-21 04:16:40 EST
This bug is created as a clone of upstream ticket: https://fedorahosted.org/freeipa/ticket/2899 When using the WebUI the admin navigation isn't enabled for users who are indirect members of roles.
Fixed upstream: e494650b2cdb6ac7e1eda3da7cf03d4c36f2739a
regression test is automated
verified in ipa-server-3.0.0-22.el6.x86_64 https://wiki.idm.lab.bos.redhat.com/qa/archive/ipa/webui/automation/firefox/test-output-ipa-server-3.0.0-QA/0114_64bit/full%20suite/IPARBACTestSuite/index.html testIndirectRoles_Bug839008 Bug 839008 - Indirect Roles Parameters: bug839008_IndirectRoles, Read DNS Entries, bug839008_privilege, bug839008_privilege desc, bug839008_role, bug839008_roleDesc, bug839008_user, bug839008_givenname, bug839008_sn, Secret123, bug839008_group, bug839008_group desc Hide output Show all outputs Starting Test: testIndirectRoles_Bug839008([bug839008_IndirectRoles, Read DNS Entries, bug839008_privilege, bug839008_privilege desc, bug839008_role, bug839008_roleDesc, bug839008_user, bug839008_givenname, bug839008_sn, Secret123, bug839008_group, bug839008_group desc]) Starting Test: testIndirectRoles_Bug839008([bug839008_IndirectRoles, Read DNS Entries, bug839008_privilege, bug839008_privilege desc, bug839008_role, bug839008_roleDesc, bug839008_user, bug839008_givenname, bug839008_sn, Secret123, bug839008_group, bug839008_group desc]) Add Permission - read dns entries Asserted: Actual value of 'bug839008_privilege desc' matches expected value. Asserted: Verified Read DNS Entries is listed for bug839008_privilege Add Role - bug839008_role Asserted: Verified privilege bug839008_privilege is listed for bug839008_role Add User bug839008_user Asserted: User added successfully Add User Group bug839008_group Asserted: User Group added successfully Asserted: user bug839008_user is a member of user group bug839008_group Asserted: User group bug839008_group is a memberof roles: bug839008_role Asserted: Indirect membership of role to the user verified Asserted: reset password for first time login Password for bug839008_user@TESTRELM.COM">bug839008_user@TESTRELM.COM: Asserted: Logged in successfully as bug839008_user Asserted: DNS zones listed - verified Test Passed: testIndirectRoles_Bug839008([bug839008_IndirectRoles, Read DNS Entries, bug839008_privilege, bug839008_privilege desc, bug839008_role, bug839008_roleDesc, bug839008_user, bug839008_givenname, bug839008_sn, Secret123, bug839008_group, bug839008_group desc]) Test Passed: testIndirectRoles_Bug839008([bug839008_IndirectRoles, Read DNS Entries, bug839008_privilege, bug839008_privilege desc, bug839008_role, bug839008_roleDesc, bug839008_user, bug839008_givenname, bug839008_sn, Secret123, bug839008_group, bug839008_group desc])
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0528.html