Bug #29376
closedNon-admin user with view_subscriptions perms cannot view subscriptions
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1805430
Description of problem:
A non-admin user cannot view subscriptions, in the same organization, in the web UI or on the CLI
How reproducible:
Error was found while running test for a role with permission filters and it failed every time.
Steps to Reproduce:
As admin user:
1. create test org "nonadmintest"
2. add manifest to org "nonadmintest"
3. create user "non-admin"
4. create role and assign to user.
5. Add perms to role:
assign_organizations, view_organizations
unattach_subscriptions, attach_subscriptions, view_subscriptions
6. logout and back in as non-admin user and try to view subscriptions.
Actual results:
There are no Subscriptions to display
Import a Manifest to manage your Entitlements.
Expected results:
I expect to see the subscriptions if view_subscriptions permissions assigned,
If they were not, i would expect to see "Permission denied"
Updated by Jonathon Turel almost 5 years ago
- Subject changed from Non-admin user with view_subscriptions perms cannot view subscriptions to Non-admin user with view_subscriptions perms cannot view subscriptions
- Target version set to Katello 3.16.0
Updated by The Foreman Bot almost 5 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/Katello/katello/pull/8619 added
Updated by The Foreman Bot almost 5 years ago
- Fixed in Releases Katello 3.16.0 added
Updated by Jonathon Turel almost 5 years ago
- Status changed from Ready For Testing to Closed
Applied in changeset katello|de6fd72533c232d9e493ed9affcb974fcd3f89b9.