Bug #5235: Filter creation allows me to enter and save with a field that isn't available for searching and blows up the resulting entity page - Foreman

Actions

Copy link

Bug #5235

closed

Filter creation allows me to enter and save with a field that isn't available for searching and blows up the resulting entity page

Added by Eric Helms almost 11 years ago. Updated almost 7 years ago.

Status:

Closed

Priority:

High

Assignee:

Category:

Users, Roles and Permissions

Target version:

1.5.2

Difficulty:

Triaged:

Bugzilla link:

1117832

Pull request:

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

1. Create a New Role
2. Click to add new Filter
3. Select 'Domain'
4. Add all permissions for Domain
5. Enter 'anything = 4' into the Search box
6. click 'Submit' (Note: no validation to stop you from saving this invalid filter)
7. Grant Role to user without any other permissions
8. Log in as new user
9. Navigate to Domains page
10. Attempt to create a Domain

Error output "Invalid search query: Field 'anything' not recognized for searching!"

Related issues 2 (1 open — 1 closed)