Project

General

Profile

Actions

Bug #6361

closed

menu item "Hosts --> All hosts" is visible to normal user from anonymous role by default

Added by Dominic Cleal almost 10 years ago. Updated almost 6 years ago.

Status:
Closed
Priority:
Normal
Category:
Authentication
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1112750
++ This bug was initially created as a clone of Bug #1112182 ++

Description of problem:
I created a simple user in "Any context" mode and did not assign any location, org and roles. But following menus are visible to that user.

Ideally user shouldn't be allowed to have access to any of menu items without any permission. Hosts menu shows "All Hosts" and user can see the created hosts.

Version-Release number of selected component (if applicable):
sat6 beta snap10 compose2

How reproducible:
always

Steps to Reproduce:
1. Login with admin user
2. create a user in "Any context" and do not assign location and org
3. logout with admin user and login with newly created user

Actual results:
User can see Hosts --> All hosts

Expected results:
user shouldn't be allowed to have access to any of menu items without any permission

Additional info:


Related issues 5 (1 open4 closed)

Related to Foreman - Refactor #994: The Role default_user is misleadingRejectedTomer Brisker06/17/2011Actions
Related to Foreman - Bug #5672: Host group filter bypassed due to unlimited view_hosts filter on anonymous roleRejected05/12/2014Actions
Related to Foreman - Bug #6926: New user with just anonymous role will get 403 Forbidden upon logon to / (redirected to /hosts)Duplicate08/05/2014Actions
Related to Foreman - Bug #1632: On login with minimal permissions, user is always taken to host pageNew05/18/2012Actions
Is duplicate of Foreman - Bug #4641: Deleting user with associated roles triggers PG::NotNullViolationClosedMaria Nita03/12/2014Actions
Actions

Also available in: Atom PDF