Bug #6492: IPMI boot and power unaccessible to non-admin users - Foreman

Actions

Copy link

Bug #6492

closed

IPMI boot and power unaccessible to non-admin users

Added by Daniel Lobato Garcia almost 10 years ago. Updated almost 6 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Daniel Lobato Garcia

Category:

BMC

Target version:

1.14.0

Difficulty:

medium

Triaged:

Bugzilla link:

Pull request:

https://github.com/theforeman/foreman/pull/3926

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Description

When any user tries to run IPMI boot or power, no matter what role is applied to them it fails.

The call always return a 404 not found, right after a filter chain halted as
:find_by_name rendered or redirectered.

The only workaround is to make every user who makes IPMI calls an admin. I see this as a hint that it has something to do with roles.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by Dominic Cleal almost 10 years ago

Related to Bug #5994: Power and Console links are disabled for non-admin users added

Actions

Copy link

Updated by Kevin Mullin almost 10 years ago

I believe I was the person who originally reported this issue on IRC.

Daniel helped me debug as much as we could, it definitely appears to revolve around Roles being set for a user.

This is actually a huge blocker for our usage of foreman, where we want to give developers access to a subset of our machines. We want to give them total control of the hardware, including the ability to set 'ipmi_boot?ipmi_device=pxe' the host.

Ironically, the user who has Roles set for it, can easily 'reboot' the box so the BMC portion of the roles works for that, just not for setting the 'ipmi_boot' device.

Please let me know if I can provide any more information for this bug, as its easily reproducible in our environment.

Actions

Copy link

Updated by Gael Queri almost 8 years ago

Same issue with Foreman 1.9.0

Actions

Copy link

Updated by Joe Mader over 7 years ago

This is a blocking problem for our shop as well - same use case as Kevin Mullin. We are using Foreman v1.10.

Actions

Copy link

Updated by The Foreman Bot over 7 years ago

Status changed from New to Ready For Testing
Pull request https://github.com/theforeman/foreman/pull/3926 added

Actions

Copy link

Updated by Daniel Lobato Garcia over 7 years ago

I've submitted a fix via https://github.com/theforeman/foreman/pull/3926 - I believe it's only the ipmi_boot action that suffers from this problem. The power_hosts permission works fine when applied to users in my environment. Let me know if that's not your case (and which version of Foreman you use)

Actions

Copy link