Project

General

Profile

Actions

Bug #38406

open

Silent failure when triggering a CapsuleSync using a user without the manage_capsule_content permission

Added by Quirin Pamp 2 days ago. Updated about 22 hours ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Foreman Proxy Content
Target version:
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

Katello has a feature to automatically schedule smart proxy/capsule content sync when relevant new content is synchronized/published/promoted on the Katello server.

The smart proxy/capsule sync is scheduled as a separate asynchronous task, which will perform the following action:

https://github.com/Katello/katello/blob/master/app/lib/actions/katello/content_view/capsule_sync.rb

If the user that triggered this action, does not have the manage_capsule_content and view_capsule_content permissions, the CapsuleSync action will not find any smart proxies to operate on and will thus successfully synchronize nothing.

In some sense all of this works as designed, but it is a bad user experience and difficult to debug.

From the users point of view, everything succeeded, but the action the user expected to happen (new content on my proxies) simply did not happen with nothing to go on on as to why it did not happen.

One simple mitigation would be to at least print a log warning when the CapsuleSync action is triggered by a user missing either of the necessary permissions.

Actions #1

Updated by Lucy Fu about 22 hours ago

  • Category changed from Inter Server Sync to Foreman Proxy Content
  • Target version set to Katello Next
  • Triaged changed from No to Yes
Actions

Also available in: Atom PDF