Project

General

Profile

Actions
Copy link

Bug #24116

closed

We should not be able to access page Update campaigns with role inventory

Bug #24116: We should not be able to access page Update campaigns with role inventory

Added by Elaad FURREEDAN about 2 years ago. Updated about 2 years ago.

Status:
Released
Priority:
N/A
Assignee:
François ARMAND
Category:
Web - UI & UX
Target version:
7.3.12
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
Minor - inconvenience | misleading | easy workaround
UX impact:
I was bothered the first time
User visibility:
Operational - other Techniques | Rudder settings | Plugins
Effort required:
Small
Priority:
49
Name check:
To do
Fix check:
Checked
Regression:
No

Description

Summary

A user with the role inventory can access the page Update campaigns with an error 

2024-01-31 10:45:31+0000 ERROR api-processing - Authorization error for 'GET secure/api/groups/tree': User 'toto' is not allowed to access GET secure/api/groups/tree

We can't do any modification, the save button is clickable but nothing happens because of the restriction on GET secure/api/groups/tree
I think we do not want to show this page at all

Updated by Vincent MEMBRÉ about 2 years ago Actions
Copy link
 #1

  • Target version changed from 7.3.11 to 7.3.12

Updated by Clark ANDRIANASOLO about 2 years ago Actions
Copy link
 #2

  • Assignee set to Clark ANDRIANASOLO

Updated by Clark ANDRIANASOLO about 2 years ago Actions
Copy link
 #3

  • Status changed from New to In progress

Updated by Clark ANDRIANASOLO about 2 years ago Actions
Copy link
 #4

  • Status changed from In progress to Pending technical review
  • Assignee changed from Clark ANDRIANASOLO to François ARMAND
  • Pull Request set to https://github.com/Normation/rudder-plugins-private/pull/502

Updated by Clark ANDRIANASOLO about 2 years ago Actions
Copy link
 #6

We want to show the "System update" pages though, there is inventory information there

Updated by Clark ANDRIANASOLO about 2 years ago Actions
Copy link
 #7

  • Status changed from Pending technical review to Pending release

Applied in changeset rudder-plugins-private:commit:rudder-plugins-private|9bd9bf60cc552227aa399a567970c9d5b3dfe66b.

Updated by Elaad FURREEDAN about 2 years ago Actions
Copy link
 #8

  • Fix check changed from To do to Checked

Updated by Vincent MEMBRÉ about 2 years ago Actions
Copy link
 #9

  • Status changed from Pending release to Released

This bug has been fixed in Rudder plugin system-updates v8.0.6-1.14

Updated by Vincent MEMBRÉ about 2 years ago Actions
Copy link
 #10

This bug has been fixed in Rudder plugin system-updates v7.3.12-1.13

Updated by Vincent MEMBRÉ about 2 years ago Actions
Copy link
 #11

This bug has been fixed in Rudder plugin system-updates v8.1.0.beta1-1.15

Actions
Copy link

Also available in: PDF Atom