Project

General

Profile

Bug #7218

User w/o view host permission can access /hosts UI page

Added by Thomas McKay about 5 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Thomas McKay
Category:
Web Interface
Target version:
1.7.0
Difficulty:
Triaged:
Bugzilla link:
1132665
Pull request:
https://github.com/theforeman/foreman/pull/1721
Fixed in Releases:
Found in Releases:

Description

A user w/o view host permission should be prevented from visiting /hosts UI page

Associated revisions

Revision cb3faecd (diff)
Added by Thomas McKay about 5 years ago

fixes #7218 - authorize hosts welcome page

History

#1 Updated by Thomas McKay about 5 years ago

  • Bugzilla link set to 1132665

#2 Updated by Dominic Cleal about 5 years ago

  • Status changed from New to Need more information

They are. Please check if you have the view_hosts permission assigned to any roles, including the Anonymous role. 1.6.0-RC1 has this permission removed, please re-test with that.

#3 Updated by Thomas McKay about 5 years ago

  • Assignee set to Thomas McKay

#4 Updated by Thomas McKay about 5 years ago

This was actually the hosts welcome page

#5 Updated by The Foreman Bot about 5 years ago

  • Status changed from Need more information to Ready For Testing
  • Target version set to 1.7.4
  • Pull request https://github.com/theforeman/foreman/pull/1721 added
  • Pull request deleted ()

#6 Updated by Dominic Cleal about 5 years ago

  • Legacy Backlogs Release (now unused) set to 21

#7 Updated by Thomas McKay about 5 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

Also available in: Atom PDF