Project

General

Profile

Actions

Bug #5235

closed

Filter creation allows me to enter and save with a field that isn't available for searching and blows up the resulting entity page

Added by Eric Helms about 10 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
High
Assignee:
-
Category:
Users, Roles and Permissions
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

1. Create a New Role
2. Click to add new Filter
3. Select 'Domain'
4. Add all permissions for Domain
5. Enter 'anything = 4' into the Search box
6. click 'Submit' (Note: no validation to stop you from saving this invalid filter)
7. Grant Role to user without any other permissions
8. Log in as new user
9. Navigate to Domains page
10. Attempt to create a Domain

Error output "Invalid search query: Field 'anything' not recognized for searching!"


Related issues 2 (1 open1 closed)

Related to Foreman - Bug #6830: upgrade 1.4.5 to 1.5.2 results in "Invalid search query" errorClosedDominic Cleal07/30/2014Actions
Blocks Foreman - Tracker #4552: New permissions/authorization system issuesNew

Actions
Actions

Also available in: Atom PDF