Project

General

Custom queries

Profile

Actions

Bug #5696

closed

Migration of Admin users from 1.4 -> 1.5 results in "Role Name_username" roles that cannot be removed and cleaned up.

Added by Derek Wright almost 11 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Users, Roles and Permissions
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Initially produced by exporting prod Foreman 1.4.2 DB into vagrant instance for upgrade testing. After upgrading vagrant instance to 1.5, users marked as Admin had migration roles created but no "Roles" tab under their username to clean up the old roles. Migration may need to skip users marked as "Admin" or, before migration, remove Admin role from users (other than the Foreman default user admin).


Related issues 3 (1 open2 closed)

Has duplicate Foreman - Bug #5695: Administrator checkbox is not visible when editing a userDuplicate05/13/2014Actions
Has duplicate Foreman - Bug #6259: Administrator user privileges cannot be demotedDuplicate06/17/2014Actions
Blocks Foreman - Tracker #4552: New permissions/authorization system issuesNew

Actions
Actions #3

Updated by Derek Wright almost 11 years ago

Also another note, when setting Admin on an individual user after the Upgrade to 1.5, their roles tab is no longer available. There is no way (that I can see in the UI) to remove admin privs from that user afterwards.

Actions #4

Updated by Marek Hulán almost 11 years ago

  • Category changed from DB migrations to Users, Roles and Permissions
  • Status changed from New to Assigned
  • Assignee set to Marek Hulán
  • Target version set to 1.8.3

The problem is that we don't display form in case when we try to edit another admin user or we try to edit our own profile. Which is definitely a bug because there is no way to modify admin's permissions/orgs/locs. It's not related to new permissions, this was added in https://github.com/theforeman/foreman/pull/1191 not sure why yet. Is the correct behaviour to display it to anybody with :edit_users permission on a particular user maybe even if I'm editing myself?

Actions #5

Updated by Marek Hulán almost 11 years ago

  • Status changed from Assigned to Ready For Testing
Actions #8

Updated by Marek Hulán almost 11 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF