Actions
Bug #32907
openUser can access job wizard without create_invocation permission
Difficulty:
Triaged:
No
Description
Steps to reproduce:
1) Create a new user called 'viewer' with viewer role
2) Log in as viewer user
3) navigate to $foreman_url/experimental/job_wizard by typing directly into URL bar
4) job wizard is displayed instead of permission denied
Updated by Ondřej Pražák over 3 years ago
- Related to Feature #32906: Add create permissions into React context added
Updated by The Foreman Bot over 3 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman_remote_execution/pull/606 added
Updated by Maria Agaphontzev about 3 years ago
- Related to Tracker #31178: pf4 job wizard added
Actions