Project

General

Profile

Actions
Copy link

Bug #31872

closed

Non admin user with viewer role can attempt to perform action on the task

Added by Adam Ruzicka almost 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Adam Ruzicka
Category:
Foreman plugin
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
1925172
Pull request:
https://github.com/theforeman/foreman-tasks/pull/607, https://github.com/theforeman/foreman-tasks/pull/646
Fixed in Releases:
foreman-tasks-5.1.0
Found in Releases:
Red Hat JIRA:

Description

Description of problem:

Non-admin user with 'Viewer' role can see tasks and select All tasks. Individual task checkbox is greyed out but Select All is available. Non Admin user can check all task and perform Action, Cancel Selected, Resume Selected, Force Cancel selected

Version-Release number of selected component (if applicable):
6.9

How reproducible:

Always

Steps to Reproduce:
1. Create a non-admin user with 'viewer' role.
2. Login with above non admin role.
3. GoTo Monitor -> Tasks -> Select All tasks -> Select Action -> Resume selected
Actual results:

It allow to select all tasks

Expected results:

It should not allow to select all

Additional info:

Related issues 1 (0 open — 1 closed)

Blocked by Foreman - Bug #31873: Expose edit permission in api index layout for bulk actions on resourceClosedAdam RuzickaActions
Actions
Copy link

Also available in: Atom PDF