Feature #812

cant assign roles to groups, just to users

Added by Marcello de Sousa over 6 years ago. Updated over 3 years ago.

Status:Closed
Priority:Normal
Assigned To:Marek Hulán
Category:Authorization
Target version:Sprint 21
Difficulty: Bugzilla link:
Found in release: Pull request:
Story points-
Velocity based estimate-
Release1.5.0Release relationshipAuto

Description

I'm able to create a usergroup and add users to it but, when I edit a user group I get 2 items on my screen :

--------------
"User Groups" 
<empty>
----and-------
"Users" 
AdminUser , UserA, UserB etc
--------------

There's no option to edit rights/roles of this group. I believe what we should expect here is something like this:

--------------
"User Groups" 
<in case nested groups are supported>
----and-------
"Roles" 
<Where you could select which role this usergroup gets>
----and-------
"Users" 
AdminUser , UserA, UserB etc
--------------


Related issues

Related to Foreman - Feature #2950: User filters - Wildcard against facts New 08/20/2013
Related to Foreman - Feature #813: Support AD group membership for authorization and authent... Closed 03/31/2011
Related to Foreman - Feature #1583: Assign roles and filters to usergroups Closed 04/20/2012
Related to Foreman - Feature #3803: As a user I'd like to create filters Closed 12/04/2013
Related to Foreman - Feature #3804: As a developer I'd like to have API to verify permissions... Closed 12/04/2013
Related to Foreman - Feature #3805: As a developer I'd like all authorization functions to re... Closed 12/04/2013
Related to Foreman - Feature #3806: As a user I'd like to have easy way to migrate existing d... Closed 12/04/2013
Related to Foreman - Feature #3807: As a user I'd like to have easy way to set filters New 12/04/2013
Related to Foreman - Feature #3808: As a user I'd like to see what a scoped_search string tha... Duplicate 12/04/2013
Related to Foreman - Feature #3817: As a user I want to set user permissions using API Closed 12/04/2013
Related to Foreman - Bug #3953: UI: No search bar for usergroups Closed 01/07/2014
Related to Foreman - Feature #3193: Allow compartmentalisation/filtering of permissions by Or... Resolved 10/03/2013
Related to Foreman - Bug #4353: relation "roles" does not exist during DB migration Closed 02/15/2014
Related to Foreman - Feature #4477: Improve permissions on resources in host creation/editing... Closed 02/27/2014
Related to Foreman - Tracker #4552: New permissions/authorization system issues New 03/05/2014
Related to Foreman - Bug #12279: Roles are not ordered by default Closed 10/23/2015
Duplicated by Foreman - Feature #3508: As a security engineer, I would like to retrieve ldap gro... Closed 10/25/2013
Blocked by Foreman - Bug #4293: Scoped search breaks on some relations Closed 02/07/2014

Associated revisions

Revision acfbc458
Added by Marek Hulán over 3 years ago

fixes #812 - new permissions model, user group role and nest support, role filters for better granularity

Contributions from:

History

#1 Updated by Ohad Levy over 6 years ago

  • Target version deleted (0.3)

#2 Updated by Ohad Levy almost 6 years ago

  • Tracker changed from Bug to Feature

#3 Updated by Ohad Levy almost 6 years ago

  • Subject changed from Usergroup rights/roles can't be configured to cant assign roles to groups, just to users

#4 Updated by Dominic Cleal about 4 years ago

  • Duplicated by Feature #3508: As a security engineer, I would like to retrieve ldap groups and use that to select roles in foreman added

#5 Updated by Ohad Levy about 4 years ago

  • Related to Feature #2950: User filters - Wildcard against facts added

#6 Updated by Ohad Levy about 4 years ago

  • Related to Feature #813: Support AD group membership for authorization and authentication added

#7 Updated by Ohad Levy about 4 years ago

  • Related to Feature #1583: Assign roles and filters to usergroups added

#8 Updated by Marek Hulán about 4 years ago

  • Target version set to Sprint 17

#9 Updated by Marek Hulán about 4 years ago

  • Description updated (diff)
  • Status changed from New to Assigned
  • Assigned To set to Marek Hulán

#10 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3803: As a user I'd like to create filters added

#11 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3804: As a developer I'd like to have API to verify permissions and to find resources based on filters added

#12 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3805: As a developer I'd like all authorization functions to respect filters added

#13 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3806: As a user I'd like to have easy way to migrate existing data to new authorization mechanism added

#14 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3807: As a user I'd like to have easy way to set filters added

#15 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3808: As a user I'd like to see what a scoped_search string that use ids means added

#16 Updated by Dominic Cleal almost 4 years ago

  • Target version changed from Sprint 17 to Sprint 18

#17 Updated by Martin Bacovsky almost 4 years ago

  • Target version deleted (Sprint 18)

#18 Updated by Marek Hulán almost 4 years ago

  • Release set to 1.4.0

#19 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3817: As a user I want to set user permissions using API added

#20 Updated by Marek Hulán almost 4 years ago

  • Related to Bug #3953: UI: No search bar for usergroups added

#21 Updated by Dominic Cleal almost 4 years ago

  • Target version set to Sprint 19

#22 Updated by Dominic Cleal almost 4 years ago

  • Release deleted (1.4.0)

#23 Updated by Dominic Cleal almost 4 years ago

  • Target version changed from Sprint 19 to Sprint 20

#24 Updated by Marek Hulán almost 4 years ago

  • Blocked by Bug #4293: Scoped search breaks on some relations added

#25 Updated by Marek Hulán almost 4 years ago

  • Related to Feature #3193: Allow compartmentalisation/filtering of permissions by Organistion/Location added

#26 Updated by Dominic Cleal over 3 years ago

  • Related to Bug #4353: relation "roles" does not exist during DB migration added

#27 Updated by Marek Hulán over 3 years ago

  • Related to Feature #4477: Improve permissions on resources in host creation/editing form added

#28 Updated by Dominic Cleal over 3 years ago

  • Target version changed from Sprint 20 to Sprint 21
  • Status changed from Assigned to Ready For Testing

#29 Updated by Dominic Cleal over 3 years ago

  • Release set to 1.5.0

#30 Updated by Marek Hulán over 3 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

#31 Updated by Dominic Cleal over 3 years ago

  • Related to Tracker #4552: New permissions/authorization system issues added

#32 Updated by Marek Hulán about 2 years ago

  • Related to Bug #12279: Roles are not ordered by default added

Also available in: Atom PDF