Bug 87412 - Permissions don't seem to work in Workflow Details
Permissions don't seem to work in Workflow Details
Status: CLOSED RAWHIDE
Product: Red Hat Enterprise CMS
Classification: Retired
Component: other (Show other bugs)
nightly
All Linux
medium Severity medium
: ---
: ---
Assigned To: Justin Ross
Jon Orris
:
Depends On:
Blocks: rc0blockers
  Show dependency treegraph
 
Reported: 2003-03-26 14:02 EST by Jon Orris
Modified: 2007-04-18 12:52 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2003-07-09 16:43:28 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description Jon Orris 2003-03-26 14:02:27 EST
In the workflow details page, there seem to be no permission checks. For
example, a user with Author role can finish all tasks, and publish an item.
Comment 1 Justin Ross 2003-06-24 17:15:55 EDT
Fixed in perforce 32809.  Also, as of this change, all the tabs of the section
UI, with the exception of the roles tab, have been audited for visibility and
form submission security checks.
Comment 2 Jon Orris 2003-06-30 13:12:13 EDT
Still no permissions @33049/Oracle.
Log in as a user in Authoring role.
Can finish authoring task (of course).
Can then finish the Approval & Deployment tasks & publish the article.
Comment 3 Justin Ross 2003-07-07 16:38:11 EDT
Perforce 33333 (what a pleasing change number) prevents users without the
SCHEDULE_PUBLICATION privilege from submitting the apply lifecycle form.  More
work on this ticket to come.
Comment 4 Justin Ross 2003-07-09 02:02:14 EDT
Fixed with perforce changes 33368 and 33377.

Note You need to log in before you can comment on or make changes to this bug.