Red Hat Bugzilla – Bug 980733
[online_ui_291]Admin user should have the permission to change the user_state to be "New Partner" or "Active partner"
Last modified: 2015-05-14 21:28:39 EDT
Description of problem: Logged in to community site, and edit my profile , changed to be "New Partner", then try to access /partner/apply page, it will redirect to /partner/tc page directly, skipped the apply step. Normal user should not have that permission when changing their profile. Version-Release number of selected component (if applicable): fork_ami_online_ui_291_665 How reproducible: always Steps to Reproduce: 1.Log in to community site 2.Edit user profile 3.Click the "Partner program" link and change user_state to be "New partner" or "Active partner" Actual results: Normal user can change their user_state to be "New partner" and skip the apply step. Expected results: Normal user should not have permission to change their user_state, so that they will skip some steps to apply. Additional info:
Fix is in https://github.com/openshift/li/pull/1713
Tested on devenv_3472, normal users do not have permission to change the user_state, but admin user also does not have permission to change, after clicking the "Partner program" link on the profile page using admin user, just left "save" and "delete" button, no forms to change the status of users.
The admin is not supposed to modify the settings from the user's profile. There is a set of partner administration pages that are used. /partner/admin/user lists users and then can find a user and select that Edit link /partner/admin/edit/user/%userid% if the userid (numeric one not the login) is already known
Tested on devenv_3481, admin user can set the status of user on /partner/admin/user page, so verify this bug, thanks.