Bug #26629
open
cannot view host facts or puppet classes tab unless admin
Description
Having an issue with Foreman 1.21. It would appear that no users, unless they are marked as admin, can view host facts or puppet classes tab.
There are no errors, just a blank page for facts, and the Puppet Classes tab is greyed out. I have set the users and hosts to the same Org, same Location. Double checked filters and roles. They are all correct.
Regardless of what I set, facts cant be viewed on the Hosts, nor can Puppet Classes, unless the user is an Admin.
Updated by Jeff Sparrow over 5 years ago
- Priority changed from High to Urgent
Still no resolution. Currently a pretty major security issue.
Updated by Jeff Sparrow over 5 years ago
- Priority changed from Urgent to Normal
Moved back to Normal now that I have a work around.
We use a Customized Viewer role. Its a duplicate of the Viewer role, but allows more options like editing and creating. However, for just viewing purposes, they are identical.
In the Customized Viewer role, I saw the Fact filter was not marked as Unlimited. When I marked it as Unlimited it would reset itself immediately after being set.
I simply added the viewer role on top of the Customized Viewer role, to our LDAP groups and now the Facts are visible.
Appears to be some issue with not being able to set the Fact filter to unlimited on custom roles.