-
Bug
-
Resolution: Unresolved
-
Normal
-
stream, 6.19.0
-
False
-
Proton Refinement Backlog
-
sat-proton
-
None
-
None
-
None
-
None
-
Yes
Description of problem:
As a user without any permissions, when I go to /new/hosts page*, the javascript attempts to load the data and gets 403 error - and it doesn't stop there, it attempts to run the script again and again, making the whole page slow and never completely loaded.
- the link is not visible, you can either enter the URL manually or use the "Login again" SSO feature which directs you there even without permissions
How reproducible:
Deterministic
Is this issue a regression from an earlier version:
Yes, this doesn't happen on sat 6.18 but does happen on stream.
Steps to Reproduce:
1. Create a newuser without any permissions
2. Login as newuser, after that enter satellite.example.com/new/hosts directly to URL
3. Open the browser console and see never ending flow of errors like:
GET https://<FQDN>/katello/api/v2/organizations/1 Status 403 15:04:06.507 XHR GET https://<FQDN>/katello/api/v2/organizations/1 [HTTP/2 403 147ms] error { message: "Access denied", details: "Missing one of the required permissions: view_organizations", missing_permissions: (1)[…] } message "Access denied" details "Missing one of the required permissions: view_organizations" missing_permissions [ "view_organizations" ] 0 "view_organizations"
Actual behavior:
Javascript calls and failures never end, the page doesn't understand that 403 is an answer enough.
Expected behavior:
Javascript should terminate after 403 and a correct message should be displayed as per related bug SAT-38091.
Business Impact / Additional info:
Automation blocker because automation times out waiting for the script to finish.
- is related to
-
SAT-38091 Accessing new host index page without view hosts permission displays the page with a 403 error
-
- New
-