Project

General

Profile

Actions

Bug #37555

closed

Improve the error message when listing/viewing capsules via API w/o permissions

Added by Chris Roberts 4 months ago. Updated 4 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Roles and Permissions
Target version:
Difficulty:
trivial
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

Description of problem:
Sequel of BZ#2096930 to improve the error message.
Non-admin user needs the `view_smart_proxies` permission to list/view smart proxies via API, but he is advised he needs `manage_capsule_content` instead.

Version-Release number of selected component (if applicable):
6.15.0

How reproducible:
always

Steps to Reproduce:
1. Try to list/show an external capsule via API for a user with no permissions.

Actual results:
$ curl -k -u unauth:unauth https://satellite.redhat.com/katello/api/capsules/2 {
"error":

{"message":"Access denied","details":"Missing one of the required permissions: manage_capsule_content","missing_permissions":["manage_capsule_content"]}
}

Expected results:
$ curl -k -u unauth:unauth https://satellite.redhat.com/katello/api/capsules/2 {
"error":

{"message":"Access denied","details":"Missing one of the required permissions: view_smart_proxies","missing_permissions":["view_smart_proxies"]}
}


Related issues 1 (0 open1 closed)

Copied to Katello - Bug #37816: Improve the error message when listing/viewing capsules via API w/o permissionsClosedChris RobertsActions
Actions #1

Updated by The Foreman Bot 4 months ago

  • Status changed from Assigned to Ready For Testing
  • Pull request https://github.com/Katello/katello/pull/11026 added
Actions #2

Updated by Ian Ballou 4 months ago

  • Triaged changed from No to Yes
Actions #3

Updated by The Foreman Bot 4 months ago

  • Fixed in Releases Katello 4.14.0 added
Actions #4

Updated by Chris Roberts 4 months ago

  • Status changed from Ready For Testing to Closed
Actions #5

Updated by Chris Roberts 30 days ago

  • Copied to Bug #37816: Improve the error message when listing/viewing capsules via API w/o permissions added
Actions

Also available in: Atom PDF