Project

General

Profile

Actions

Bug #31872

closed

Non admin user with viewer role can attempt to perform action on the task

Added by Adam Ruzicka about 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Foreman plugin
Target version:
-
Fixed in Releases:
Found in Releases:

Description

Description of problem:

Non-admin user with 'Viewer' role can see tasks and select All tasks. Individual task checkbox is greyed out but Select All is available. Non Admin user can check all task and perform Action, Cancel Selected, Resume Selected, Force Cancel selected

Version-Release number of selected component (if applicable):
6.9

How reproducible:

Always

Steps to Reproduce:
1. Create a non-admin user with 'viewer' role.
2. Login with above non admin role.
3. GoTo Monitor -> Tasks -> Select All tasks -> Select Action -> Resume selected
Actual results:

It allow to select all tasks

Expected results:

It should not allow to select all

Additional info:


Related issues 1 (0 open1 closed)

Blocked by Foreman - Bug #31873: Expose edit permission in api index layout for bulk actions on resourceClosedAdam RuzickaActions
Actions #1

Updated by Adam Ruzicka about 3 years ago

  • Blocked by Bug #31873: Expose edit permission in api index layout for bulk actions on resource added
Actions #2

Updated by The Foreman Bot about 3 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman-tasks/pull/607 added
Actions #3

Updated by The Foreman Bot about 3 years ago

  • Fixed in Releases foreman-tasks-3.1.0 added
Actions #4

Updated by Adam Ruzicka about 3 years ago

  • Status changed from Ready For Testing to Closed
Actions #5

Updated by Adam Ruzicka about 3 years ago

  • Target version set to foreman-tasks-3.0.5
  • Fixed in Releases deleted (foreman-tasks-3.1.0)
Actions #6

Updated by Adam Ruzicka about 3 years ago

  • Status changed from Closed to New
  • Assignee deleted (Adam Ruzicka)
  • Target version deleted (foreman-tasks-3.0.5)

We need to rethink how we tackle this, reverting the current solution for now.

Actions #7

Updated by The Foreman Bot over 2 years ago

  • Status changed from New to Ready For Testing
  • Assignee set to Adam Ruzicka
  • Pull request https://github.com/theforeman/foreman-tasks/pull/646 added
Actions #8

Updated by The Foreman Bot over 2 years ago

  • Fixed in Releases added
Actions #9

Updated by Adam Ruzicka over 2 years ago

  • Status changed from Ready For Testing to Closed
Actions #10

Updated by Adam Ruzicka over 2 years ago

  • Fixed in Releases foreman-tasks-4.1.4 added
Actions #11

Updated by Adam Ruzicka over 2 years ago

  • Fixed in Releases foreman-tasks-5.1.0 added
  • Fixed in Releases deleted (foreman-tasks-4.1.4)
Actions

Also available in: Atom PDF