-
Bug
-
Resolution: Unresolved
-
Undefined
-
6.12.0, 6.10.0, 6.13.0, 6.14.0, 6.15.0, 6.16.0, 6.17.0, 6.18.0
-
3
-
False
-
foreman-3.17.0, rubygem-hammer_cli_foreman-3.17.0
-
Satellite Endeavour Sprint 1, Satellite Endeavour Sprint 2, Satellite Endeavour Sprint 6, Satellite Endeavour Sprint 7, Satellite Endeavour Sprint 8
-
sat-endeavour
-
Known Issue
-
-
Done
-
No Coverage
Description of problem:
Filters are created as completely unlimited, ignoring organizations and locations set at the role level.
How reproducible:
always
Is this issue a regression from an earlier version:
Doing some code archeology it seems this might have worked on 6.7 and earlier
Steps to Reproduce:
1. Have some organizations and locations with hosts placed in them
2. Create a role
3. Assign an organization and a location to the role
4. Create a filter under the role to search on hosts, don't change anything in there
5. Edit the filter, don't change anything, click submit
Actual behavior:
After step 4, the filter shows up as unlimited, if you look at it in the database, it has taxonomy_search field empty. After step 5, the filter no longer shows up as unlimited, in the db the taxonomy_search field is populated.
When a user is given this role, they should be able to see hosts from other organizations than the one that is assigned to the role.
Expected behavior:
After step 4, the filter does not show up as unlimited, if you look at it in the database, it should have taxonomy_search field populated with a search query matching the organizations and locations from the role. After step 5, the situation is the same, no update happened.
When a user is given this role, they should be able to see only hosts from the organizations to which the role is assigned.
Business Impact / Additional info:
Workaround
Edit the filter after creating it without changing anything.
Notes
- The fix should contain a migration that would regenerate the taxonomy_search field of all filters which have override set to false to make them honor the organizations and locations set on the role. This might be surprising to users so this is probably worthy of having a RN
- is documented by
-
SAT-28820 Deprecate the org/locs setting on the individual RBAC Filters
-
- Closed
-
- is duplicated by
-
SAT-20617 Weird behavior when applying role filters
-
- Closed
-
- is related to
-
SAT-39173 Fixes #38805 - Remove options related to filter overrides by adamruzicka · Pull Request #645 · theforeman/hammer-cli-foreman · GitHub
-
- Closed
-
1.
|
Drop filter override related tests from robottelo |
|
In Progress | |
Adam Ruzicka |