Bug #38406
openSilent failure when triggering a CapsuleSync using a user without the manage_capsule_content permission
Description
Katello has a feature to automatically schedule smart proxy/capsule content sync when relevant new content is synchronized/published/promoted on the Katello server.
The smart proxy/capsule sync is scheduled as a separate asynchronous task, which will perform the following action:
https://github.com/Katello/katello/blob/master/app/lib/actions/katello/content_view/capsule_sync.rb
If the user that triggered this action, does not have the manage_capsule_content and view_capsule_content permissions, the CapsuleSync action will not find any smart proxies to operate on and will thus successfully synchronize nothing.
In some sense all of this works as designed, but it is a bad user experience and difficult to debug.
From the users point of view, everything succeeded, but the action the user expected to happen (new content on my proxies) simply did not happen with nothing to go on on as to why it did not happen.
One simple mitigation would be to at least print a log warning when the CapsuleSync action is triggered by a user missing either of the necessary permissions.
Updated by Lucy Fu about 22 hours ago
- Category changed from Inter Server Sync to Foreman Proxy Content
- Target version set to Katello Next
- Triaged changed from No to Yes