Bug #14410
closed
Failure to run DB migrations prevents plugin permissions being loaded
Added by Daniel Lobato Garcia about 8 years ago.
Updated almost 6 years ago.
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1221971
Description of problem:
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1. configure LDAP authentication using http://theforeman.org/manuals/1.8/index.html#4.1.1LDAPAuthentication
2. create a user-group with external user-group (example Active Directory)
3. login as a AD user, which is part of the external user-group
4. create a ak_role via the roles and assign all the "activation keys" permissions via the filters.
5. assign the role "ak_role" at the user_group level(only after step 3) performed to reproduce)
Actual results:
login as a AD user, which is part of the external user-group, to observe that the AD user has no access/permissions for all the roles added after the AD user was logged in.
Expected results:
Adding new roles for the AD user at user-group level after the AD user was logged-id should be possible.
Additional info:
Related issues
1 (1 open — 0 closed)
- Category set to Users, Roles and Permissions
- Status changed from New to Need more information
Does the user have the groups? Please try on a current version and provide logs with LDAP debugging enabled.
- Project changed from Foreman to Katello
- Category deleted (
Users, Roles and Permissions)
- Status changed from Need more information to Assigned
Yeah, the user has the groups. The problem I'm facing is that Katello links are not being displayed even though the user has the appropriate permissions. I'll move this to the Katello project.
It doesn't have to do much with group permissions either I don't think. Even if I set the view_activation_keys permission to the user directly, it doesn't work.
- Subject changed from adding new roles at user_group level after user logs in seems to have no effect to Adding activation_keys permissions to user seems to have no effect
It has to deal somehow with the way permissions are loaded.
On a production nightly host: `Foreman::AccessControl.send(:permissions).map(&:name).count` -> 161 - it's missing Katello permissions
On a katello-deploy centos7-devel host: `Foreman::AccessControl.send(:permissions).map(&:name).count` -> 238 - bug can't be reproduced
- Project changed from Katello to Foreman
- Status changed from Assigned to Ready For Testing
- Pull request https://github.com/theforeman/foreman/pull/3426 added
- Pull request https://github.com/theforeman/foreman/pull/3561 added
- Priority changed from High to Normal
- Subject changed from Adding activation_keys permissions to user seems to have no effect to Failure to run DB migrations prevents plugin permissions being loaded
- Category set to DB migrations
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
- translation missing: en.field_release set to 160
- Related to Refactor #15866: Provide alternative way of migrating data as oposed misuing db:migrate for this purpose added
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by 
Updated by