Created attachment 781965 [details] delete all button problem Description of problem: When a user tries to "delete all" alerts on a resource, it fails with exception. Version-Release number of selected component (if applicable): 4.7 How reproducible: always Steps to Reproduce: 1. create a user with - global permissions: manage inventory - resource permissions: all, read&write 2. login as with user 3. in tree browser select a particular resource 4. go to Alerts / History tab 5. have some alerts there 6. click on "Delete All" button Actual results: Operation fails, the message bar on the top of the page displays red message: ----------------------------------- [1375449667092] org.rhq.enterprise.server.authz.PermissionException:Subject [vcraciunoiu] is not authorized for [MANAGE_SETTINGS]: invocation: method=public int org.rhq.enterprise.server.alert.AlertManagerBean.deleteAlertsByContext(org.rhq.core.domain.auth.Subject,org.rhq.core.domain.common.EntityContext),context-data={} ----------------------------------- Expected results: Operation should succeed, all alerts of that resource should be deleted. Additional info: It shouldn't be any difference between "Delete" and "Delete All" buttons in terms of permissions.