Project

General

Profile

Tracker #30872

Use proper authorization in controllers

Added by Justin Sherrill about 1 month ago. Updated 4 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Security
Target version:
Katello 3.18.0
% Done:

47%

Difficulty:
Triaged:
Yes
Bugzilla link:
Fixed in Releases:
Found in Releases:

Subtasks

Bug #30873: Add proper authorization to activation keys controllerClosedJustin Sherrill
Bug #30874: Fix permissions in environments controllerClosedJames Jeffers
Bug #30876: Add authorizations for host_collections controllerClosedJeremy Lenz
Bug #30877: Add authorization for sync_plan controllerClosedSamir Jha
Bug #30878: authorization for content credentials controllerClosedJustin Sherrill
Bug #30879: Add permissions for capsules controller and capsule_content_controllerResolvedJeremy Lenz
Tracker #30881: Add authorization for upstream_subscriptions controllerNewJohn Mitsch

Bug #30882: Fix permissions in gpg keys controllerNewJames Jeffers
Bug #30884: Add authorization for Products controllerReady For TestingSamir Jha
Bug #31148: add authorization for host_contents controllerRejectedIan Ballou
Bug #31150: Fix content view components controller authorizationReady For TestingJustin Sherrill
Refactor #31151: add authorization for host_debs controllerReady For TestingChris Roberts
Tracker #31152: add authorization for sync controllerReady For TestingIan Ballou

Tracker #31153: add authorization for host_module_streams controllerRejected

Bug #31156: Add authorization for repositories_bulk_actions controllerReady For TestingSamir Jha
Tracker #31158: Add proper authorization to content view versions controllerReady For TestingJustin Sherrill

Tracker #31159: Add authorization for HostBulkActionsControllerReady For TestingJonathon Turel

Related issues

Blocked by Katello - Bug #30875: Add authorization for ContentViewsController controllerClosed
Blocked by Katello - Bug #30880: Add permission support to validate 404 on denial and multi permissionsClosed
Blocked by Katello - Bug #31146: Add authorization for content_view_filters controllerReady For Testing
Blocked by Katello - Bug #31155: Add Authorization for Host Packages ControllerRejected

History

#1 Updated by Partha Aji about 1 month ago

  • Blocked by Bug #30875: Add authorization for ContentViewsController controller added

#2 Updated by Partha Aji about 1 month ago

  • Blocked by Bug #30880: Add permission support to validate 404 on denial and multi permissions added

#3 Updated by Ian Ballou about 1 month ago

  • Target version set to Katello 3.18.0

#4 Updated by Ian Ballou about 1 month ago

  • Triaged changed from No to Yes

#5 Updated by Partha Aji 4 days ago

  • Blocked by Bug #31146: Add authorization for content_view_filters controller added

#6 Updated by Jonathon Turel 4 days ago

  • Blocked by Bug #31155: Add Authorization for Host Packages Controller added

Also available in: Atom PDF