Bug 909692 - Non admin user have access to /hosts url
Summary: Non admin user have access to /hosts url
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine
Version: 3.1.2
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 3.2.0
Assignee: Ravi Nori
QA Contact: Ondra Machacek
URL:
Whiteboard: infra
Depends On:
Blocks: 910368 915537
TreeView+ depends on / blocked
 
Reported: 2013-02-10 13:36 UTC by Ondra Machacek
Modified: 2016-02-10 19:39 UTC (History)
10 users (show)

Fixed In Version: sf8
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 910368 (view as bug list)
Environment:
Last Closed: 2013-06-11 09:18:25 UTC
oVirt Team: Infra
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 11933 0 None None None Never

Description Ondra Machacek 2013-02-10 13:36:01 UTC 
Description of problem:
Non-admin user can have access to /hosts url.

Version-Release number of selected component (if applicable):
si27

How reproducible:
always

Steps to Reproduce:
1. Add user non-admin role(for example: UserVmManager on cluster)
2. Access /hosts url as user.
  
Actual results:
User can view /hosts url.

Expected results:
error 403, forbidden

Additional info:
bug 839569
Comment 7 Itamar Heim 2013-06-11 09:18:25 UTC 
3.2 has been released
Comment 8 Itamar Heim 2013-06-11 09:42:23 UTC 
3.2 has been released
Note You need to log in before you can comment on or make changes to this bug.