Project

General

Profile

Actions
Copy link

Bug #7218

closed

User w/o view host permission can access /hosts UI page

Added by Thomas McKay over 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Thomas McKay
Category:
Web Interface
Target version:
1.7.0
Difficulty:
Triaged:
Bugzilla link:
1132665
Pull request:
https://github.com/theforeman/foreman/pull/1721
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

A user w/o view host permission should be prevented from visiting /hosts UI page

Actions
Copy link
 #1

Updated by Thomas McKay over 10 years ago

  • Bugzilla link set to 1132665
Actions
Copy link
 #2

Updated by Dominic Cleal over 10 years ago

  • Status changed from New to Need more information

They are. Please check if you have the view_hosts permission assigned to any roles, including the Anonymous role. 1.6.0-RC1 has this permission removed, please re-test with that.

Actions
Copy link
 #3

Updated by Thomas McKay over 10 years ago

  • Assignee set to Thomas McKay
Actions
Copy link
 #4

Updated by Thomas McKay over 10 years ago

This was actually the hosts welcome page

Actions
Copy link
 #5

Updated by The Foreman Bot over 10 years ago

  • Status changed from Need more information to Ready For Testing
  • Target version set to 1.7.4
  • Pull request https://github.com/theforeman/foreman/pull/1721 added
  • Pull request deleted ()
Actions
Copy link
 #6

Updated by Dominic Cleal over 10 years ago

  • Translation missing: en.field_release set to 21
Actions
Copy link
 #7

Updated by Thomas McKay over 10 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions
Copy link

Also available in: Atom PDF