Project

General

Profile

Actions

Bug #36449

closed

Unable to access API using non-admin users.

Added by Adam Ruzicka 12 months ago. Updated 8 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
API
Target version:
-
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=2208588

Unable to access Satellite 6 API using non-admin users.

Description of problem:

Non-Admin Users cannot access API, no matter which roles has been assigned to them.

The same user will be able to access, when you mark the user as "ADMIN".

Tested on Satellite 6.11, 6.12, 6.13

Version-Release number of selected component (if applicable):

How reproducible:
100 %

Steps to Reproduce:
1. Create a user "NA-USER" on Satellite GUI but don't mark it as Admin.

2. Assign all the Roles to the user "NA-USER" but don't mark it as "Admin" and then try accessing the API:

3. Try to access the API https://satellite.example.com/api/v2/

Actual results:
~~
error
message "Access denied"
details "Missing one of the required permissions: "
missing_permissions []
~~

Expected results:
Should have some role which can allow non-admin users to access api.

Additional info:
If I mark the same user as Admin, it will be able to access the API successfully and will be able to see the result as well.

Similar bug which got resolved on Satellite version 6.8: https://bugzilla.redhat.com/show_bug.cgi?id=1757394

Upstream Foreman Issue Tracker for Satelltie 6.8: https://projects.theforeman.org/issues/28405

Actions #1

Updated by The Foreman Bot 12 months ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/9720 added
Actions #2

Updated by The Foreman Bot 11 months ago

  • Fixed in Releases 3.8.0 added
Actions #3

Updated by Adam Ruzicka 11 months ago

  • Status changed from Ready For Testing to Closed
Actions #4

Updated by The Foreman Bot 11 months ago

  • Pull request https://github.com/theforeman/foreman/pull/9753 added
Actions #5

Updated by Adam Ruzicka 11 months ago

  • Subject changed from Unable to access Satellite 6 API using non-admin users. to Unable to access Satellite 6 API using non-admin users.
  • Pull request deleted (https://github.com/theforeman/foreman/pull/9753)
Actions #6

Updated by Ewoud Kohl van Wijngaarden 8 months ago

  • Subject changed from Unable to access Satellite 6 API using non-admin users. to Unable to access API using non-admin users.
  • Category set to API
  • Triaged changed from No to Yes
Actions

Also available in: Atom PDF