Project

General

Profile

Bug #26629

cannot view host facts or puppet classes tab unless admin

Added by Jeff Sparrow almost 2 years ago. Updated almost 2 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Facts
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

Having an issue with Foreman 1.21. It would appear that no users, unless they are marked as admin, can view host facts or puppet classes tab.
There are no errors, just a blank page for facts, and the Puppet Classes tab is greyed out. I have set the users and hosts to the same Org, same Location. Double checked filters and roles. They are all correct.
Regardless of what I set, facts cant be viewed on the Hosts, nor can Puppet Classes, unless the user is an Admin.

History

#1 Updated by Jeff Sparrow almost 2 years ago

  • Priority changed from High to Urgent

Still no resolution. Currently a pretty major security issue.

#2 Updated by Jeff Sparrow almost 2 years ago

  • Priority changed from Urgent to Normal

Moved back to Normal now that I have a work around.

We use a Customized Viewer role. Its a duplicate of the Viewer role, but allows more options like editing and creating. However, for just viewing purposes, they are identical.
In the Customized Viewer role, I saw the Fact filter was not marked as Unlimited. When I marked it as Unlimited it would reset itself immediately after being set.
I simply added the viewer role on top of the Customized Viewer role, to our LDAP groups and now the Facts are visible.

Appears to be some issue with not being able to set the Fact filter to unlimited on custom roles.

Also available in: Atom PDF