Project

General

Profile

Actions

Bug #19704

closed

Upcoming security fix in Foreman breaks KeepCurrentUser middleware

Added by Marek Hulán over 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Foreman plugin
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Katello tests failures revealed KeepCurrentUser middleware can fail when stored user is admin. It seems that org/loc scope is not restored and the admin won't be found when the change from #19612 will be present (planned for Foreman 1.15.1).


Related issues 3 (0 open3 closed)

Related to Foreman - Bug #19612: CVE-2017-7505: User scoped in organization with permissions for user management can manage administrators that are not assigned to any organizationClosedMarek Hulán05/22/2017Actions
Related to Katello - Bug #19664: Upcoming security fix in Foreman breaks Katello testsClosedMarek Hulán05/25/2017Actions
Related to Katello - Bug #20040: Can't create new productResolvedJustin Sherrill06/18/2017Actions
Actions #1

Updated by Marek Hulán over 7 years ago

  • Related to Bug #19612: CVE-2017-7505: User scoped in organization with permissions for user management can manage administrators that are not assigned to any organization added
Actions #2

Updated by Marek Hulán over 7 years ago

  • Related to Bug #19664: Upcoming security fix in Foreman breaks Katello tests added
Actions #3

Updated by The Foreman Bot over 7 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman-tasks/pull/252 added
Actions #4

Updated by Marek Hulán over 7 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions #5

Updated by Ivan Necas over 7 years ago

  • Translation missing: en.field_release set to 252
Actions #6

Updated by Enrico Mingardo over 7 years ago

  • Related to Bug #20040: Can't create new product added
Actions

Also available in: Atom PDF