Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-17947

Unable to access Satellite 6 API using non-admin users.

XMLWordPrintable

    • Moderate
    • None

      Unable to access Satellite 6 API using non-admin users.

      Description of problem:

      Non-Admin Users cannot access API, no matter which roles has been assigned to them.

      The same user will be able to access, when you mark the user as "ADMIN".

      Tested on Satellite 6.11, 6.12, 6.13

      Version-Release number of selected component (if applicable):

      How reproducible:
      100 %

      Steps to Reproduce:
      1. Create a user "NA-USER" on Satellite GUI but don't mark it as Admin.

      2. Assign all the Roles to the user "NA-USER" but don't mark it as "Admin" and then try accessing the API:

      3. Try to access the API https://satellite.example.com/api/v2/

      Actual results:
      ~~~
      error
      message "Access denied"
      details "Missing one of the required permissions: "
      missing_permissions []
      ~~~

      Expected results:
      Should have some role which can allow non-admin users to access api.

      Additional info:
      If I mark the same user as Admin, it will be able to access the API successfully and will be able to see the result as well.

      Similar bug which got resolved on Satellite version 6.8: https://bugzilla.redhat.com/show_bug.cgi?id=1757394

      Upstream Foreman Issue Tracker for Satelltie 6.8: https://projects.theforeman.org/issues/28405

              aruzicka@redhat.com Adam Ruzicka
              aruzicka@redhat.com Adam Ruzicka
              Lukas Hellebrandt Lukas Hellebrandt
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: