Actions
Bug #30387
closedUser can view bookmarks without assigning view_bookmarks permission in a role
Status:
Closed
Priority:
Normal
Assignee:
Category:
Users, Roles and Permissions
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1805740
Description of problem:
Non-admin user is able to view bookmarks without having view_bookmarks permissions.
Version-Release number of selected component (if applicable): Satellite 6.7
How reproducible: Always
Steps to Reproduce:
1. Create a user without any permission
2. Login to the satellite using the same user
3. Navigate to Administer -> Bookmarks.
4. User is able to view all bookmarks
Expected results: User should not able to view bookmarks without view_bookmarks permission
Actions