Description of problem:

1. LDAP user is the part of User Group with a custom role having view permission.

2. Login to Satellite WebUI as an LDAP user shows the following error:

~~~
Permission denied
You are not authorised to perform this action.
Please request one of the required permissions listed below from a Satellite administrator:

view_hosts"
~~~

3. After successful login from step 2, the user gets removed from the user section in the user group.

Satellite WebUI -> Administer -> User Group -> Edit any User Group -> under the 'User Group' tab we see 'Users' with 'All items' and 'Selected Items' sections.

The user gets removed from the 'Selected Items' after login as an LDAP user.

4. However, refreshing the 'External Group' creates a user as it is in the user group section.

Satellite WebUI -> Administer -> User Group -> Edit any User Group -> External Group > Refresh

The issue gets resolved after assigning the same role manually to the user from:

Satellite WebUI -> Administer -> User -> Edit User -> Roles -> Select from 'All Items'

Version-Release number of selected component (if applicable):

• NA

How reproducible:

• Every time the LDAP user successfully login to the WebUI.

Steps to Reproduce:
1.
2.
3.

Actual results:

• The user gets removed from the user group after a successful login as an LDAP user. It gets added after performing a manual 'Refresh' from the External Group under the User Group.
• The role assigned to the user group is not working as expected and showing an error.

Expected results:

• The user should not be removed from the user group after a successful login as an LDAP user.
• The role assigned to the user group should be working and should show pages as per the assigned role.

Additional info:

• NA