-
Bug
-
Resolution: Not a Bug
-
Major
-
None
-
None
Description of Problem
I have created a user (policy-rhel-viewer-1) that does not have any remediations roles (I removed these from the default/custom access group) and does have the RHEL viewer role (no RHEL admin or rhel operator role). This user can download remediations playbooks.
The permissions in "My User Access" only have one line for remediations and it is "read".
How reproducible
Always
Steps to Reproduce
- create a user that does not have any remediations roles (I removed these from the default/custom access group) and does have the RHEL viewer role (no RHEL admin or rhel operator role). A group with the rhel viewer role will need to be created and the user added to it.
- Go to the "Automation Toolkit" > "Remediations" view
- Select a checkbox beside a playbook and click the "Download playbook" button.
- *If no playbooks exist in the view, another user with write permissions is going to need to click on a system in the system view, select an advisory, click on "Plan remediation' and follow the modals to generate a playbook.
Actual Behavior
The modals are displayed to download a playbook (I filled these out and a playbook is generated)
Expected Behavior
The "Download playbook" button should remain disabled when a playbook is selected