Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-22358

Improve the error message when listing/viewing capsules via API w/o permissions

XMLWordPrintable

    • 0
    • False
    • Hide

      None

      Show
      None
    • False
    • NEW
    • 0
    • Phoenix - Content
    • Fail
    • Sprint 134, Sprint 135, Sprint 137, Sprint 138, Sprint 139, Sprint 140, Sprint 141
    • Low
    • No

      Description of problem:
      Sequel of BZ#2096930 to improve the error message.
      Non-admin user needs the `view_smart_proxies` permission to list/view smart proxies via API, but he is advised he needs `manage_capsule_content` instead.

      Version-Release number of selected component (if applicable):
      6.15.0

      How reproducible:
      always

      Steps to Reproduce:
      1. Try to list/show an external capsule via API for a user with no permissions.

      Actual results:
      $ curl -k -u unauth:unauth https://satellite.redhat.com/katello/api/capsules/2
      {
      "error":

      {"message":"Access denied","details":"Missing one of the required permissions: manage_capsule_content","missing_permissions":["manage_capsule_content"]}

      }

      Expected results:
      $ curl -k -u unauth:unauth https://satellite.redhat.com/katello/api/capsules/2
      {
      "error":

      {"message":"Access denied","details":"Missing one of the required permissions: view_smart_proxies","missing_permissions":["view_smart_proxies"]}

      }

              rhn-support-chrobert Chris Roberts
              vsedmik@redhat.com Vladimír Sedmík
              Vladimír Sedmík Vladimír Sedmík
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: