Project

General

Profile

Actions
Copy link

Bug #30092

closed

Content view version details can be viewed by an organization that the content view does not belong to

Added by James Jeffers over 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
James Jeffers
Category:
Content Views
Target version:
Katello 3.16.0
Difficulty:
Triaged:
Yes
Bugzilla link:
1817224
Pull request:
https://github.com/Katello/katello/pull/9048, https://github.com/Katello/katello/pull/8759, https://github.com/Katello/katello/pull/8865
Fixed in Releases:
Katello 4.0.0
Found in Releases:
Katello 3.16.0
Red Hat JIRA:

Description

Similar to https://projects.theforeman.org/issues/29013, current organization parameters are not supplied to the controller, and a full set of content view version details are displayed.

Steps to Reproduce:
1. Create 2 different organizations
2. Log into the first org.
3. Create cv and add some repos
4. publish
5. In that cv, switch org

Actions
Copy link

Also available in: Atom PDF