Actions
Bug #13912
closedUnauthorized user can remove host parameter
Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Users, Roles and Permissions
Target version:
-
Description
Hello,
I defined a Role (filters in attachment) which allows user to Edit host information (organization, host group, etc...).
On "Parameters" tab, the user cannot edit or add parameter, but he can Remove Host parameters (cf attachments).
Expected behaviour : deny removing parameter and remove the "Remove parameter" button from the page
PS : Found in Foreman included in Satellite 6.1.7
Files
Actions