Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 910368

Summary:	Non admin user have access to /hosts url
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Idith Tal-Kohen <italkohe>
Component:	ovirt-engine	Assignee:	Yair Zaslavsky <yzaslavs>
Status:	CLOSED ERRATA	QA Contact:	Ondra Machacek <omachace>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	3.1.2	CC:	acathrow, cpelland, dyasny, iheim, jbiddle, lpeer, omachace, oourfali, pstehlik, Rhev-m-bugs, sgrinber, yeylon, ykaul, yzaslavs
Target Milestone:	---	Keywords:	Regression, ZStream
Target Release:	3.1.3
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	infra
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	Previously, non-admin users were able to access the /hosts URL despite not having appropriate permissions. This has been fixed so that a 403 Forbidden error will appear when attempting to access the /hosts url without admin permissions.	Story Points:	---
Clone Of:	909692	Environment:
Last Closed:	2013-03-12 14:29:59 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	909692
Bug Blocks:

Comment 7 errata-xmlrpc 2013-03-12 14:29:59 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-0557.html