Bug 980733 - [online_ui_291]Admin user should have the permission to change the user_state to be "New Partner" or "Active partner"
Summary: [online_ui_291]Admin user should have the permission to change the user_state...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Online
Classification: Red Hat
Component: Website
Version: 2.x
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Jessica Forrester
QA Contact: libra bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-07-03 07:08 UTC by Yujie Zhang
Modified: 2015-05-15 01:28 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-07-22 15:20:12 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Yujie Zhang 2013-07-03 07:08:00 UTC
Description of problem:

Logged in to community site, and edit my profile , changed to be "New Partner", then try to access /partner/apply page, it will redirect to /partner/tc page directly, skipped the apply step. Normal user should not have that permission when changing their profile.

Version-Release number of selected component (if applicable):
fork_ami_online_ui_291_665

How reproducible:
always

Steps to Reproduce:
1.Log in to community site
2.Edit user profile
3.Click the "Partner program" link and change user_state to be "New partner" or "Active partner"

Actual results:

Normal user can change their user_state to be "New partner" and skip the apply step.

Expected results:

Normal user should not have permission to change their user_state, so that they will skip some steps to apply.


Additional info:

Comment 1 Jessica Forrester 2013-07-09 17:26:12 UTC
Fix is in https://github.com/openshift/li/pull/1713

Comment 2 Yujie Zhang 2013-07-10 07:05:47 UTC
Tested on devenv_3472, normal users do not have permission to change the user_state, but admin user also does not have permission to change, after clicking the "Partner program" link on the profile page using admin user, just left "save" and "delete" button, no forms to change the status of users.

Comment 3 Jessica Forrester 2013-07-10 13:30:39 UTC
The admin is not supposed to modify the settings from the user's profile.  There is a set of partner administration pages that are used.

/partner/admin/user   lists users and then can find a user and select that Edit link
/partner/admin/edit/user/%userid% if the userid (numeric one not the login) is already known

Comment 4 Yujie Zhang 2013-07-11 02:45:59 UTC
Tested on devenv_3481, admin user can set the status of user on /partner/admin/user page, so verify this bug, thanks.


Note You need to log in before you can comment on or make changes to this bug.