Project

General

Profile

Actions

Bug #37816

closed

Improve the error message when listing/viewing capsules via API w/o permissions

Added by Chris Roberts 3 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Roles and Permissions
Target version:
Found in Releases:

Description

Description of problem:
Sequel of BZ#2096930 to improve the error message.
Non-admin user needs the `view_smart_proxies` permission to list/view smart proxies via API, but he is advised he needs `manage_capsule_content` instead.

Version-Release number of selected component (if applicable):
6.15.0

How reproducible:
always

Steps to Reproduce:
1. Try to list/show an external capsule via API for a user with no permissions.

Actual results:
$ curl -k -u unauth:unauth https://satellite.redhat.com/katello/api/capsules/2 {
"error":

{"message":"Access denied","details":"Missing one of the required permissions: manage_capsule_content","missing_permissions":["manage_capsule_content"]}
}

Expected results:
$ curl -k -u unauth:unauth https://satellite.redhat.com/katello/api/capsules/2 {
"error":

{"message":"Access denied","details":"Missing one of the required permissions: view_smart_proxies","missing_permissions":["view_smart_proxies"]}
}


Related issues 1 (0 open1 closed)

Copied from Katello - Bug #37555: Improve the error message when listing/viewing capsules via API w/o permissionsClosedChris RobertsActions
Actions

Also available in: Atom PDF