Migration of Admin users from 1.4 -> 1.5 results in "Role Name_username" roles that cannot be removed and cleaned up.
|Assigned To:||Marek Hulán|
|Target version:||Sprint 24|
|Found in release:||1.5.0||Pull request:|
|Velocity based estimate||-|
Initially produced by exporting prod Foreman 1.4.2 DB into vagrant instance for upgrade testing. After upgrading vagrant instance to 1.5, users marked as Admin had migration roles created but no "Roles" tab under their username to clean up the old roles. Migration may need to skip users marked as "Admin" or, before migration, remove Admin role from users (other than the Foreman default user admin).
#4 Updated by Marek Hulán over 3 years ago
- Category changed from DB migrations to Authorization
- Status changed from New to Assigned
- Assigned To set to Marek Hulán
- Target version set to Sprint 23
- Found in release set to 1.5.0
The problem is that we don't display form in case when we try to edit another admin user or we try to edit our own profile. Which is definitely a bug because there is no way to modify admin's permissions/orgs/locs. It's not related to new permissions, this was added in https://github.com/theforeman/foreman/pull/1191 not sure why yet. Is the correct behaviour to display it to anybody with :edit_users permission on a particular user maybe even if I'm editing myself?