Project

General

Profile

Actions

Bug #32907

open

User can access job wizard without create_invocation permission

Added by Ondřej Pražák over 3 years ago. Updated over 3 years ago.

Status:
Ready For Testing
Priority:
Normal
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

Steps to reproduce:

1) Create a new user called 'viewer' with viewer role
2) Log in as viewer user
3) navigate to $foreman_url/experimental/job_wizard by typing directly into URL bar
4) job wizard is displayed instead of permission denied


Related issues 2 (2 open0 closed)

Related to Foreman - Feature #32906: Add create permissions into React contextReady For TestingOndřej PražákActions
Related to Foreman Remote Execution - Tracker #31178: pf4 job wizardNewMaria Agaphontzev

Actions
Actions #1

Updated by Ondřej Pražák over 3 years ago

  • Related to Feature #32906: Add create permissions into React context added
Actions #2

Updated by The Foreman Bot over 3 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman_remote_execution/pull/606 added
Actions #3

Updated by Maria Agaphontzev about 3 years ago

Actions

Also available in: Atom PDF