-
Notifications
You must be signed in to change notification settings - Fork 356
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Require privilege network providers and cloud tenants for new cloud network, cloud subnet, network router form #3165
Conversation
c5b734f
to
13cca64
Compare
13cca64
to
a28f4ab
Compare
Last 2 commits are extending this and adding also privilege for Cloud Tenants as requirement (according this different but related BZ https://bugzilla.redhat.com/show_bug.cgi?id=1520651 ) |
in new cloud volume form if permission for list of cloud tenant(cloud_tenant_show_list) is missing Fixes ManageIQ#3165
in new cloud volume form if permission for list of cloud tenant(cloud_tenant_show_list) is missing Fixes ManageIQ#3165
Test failures look relevant ;) |
d9ae86a
to
1c63c15
Compare
should be fixed 👍 |
a65a000
to
031656f
Compare
@lpichler @himdel i think with role_allows check in place https://github.com/ManageIQ/manageiq-ui-classic/pull/3165/files#diff-fd8f9ab59428266a5f699efcb9933979R7 we shouldn't need those additional assert_priviliges calls |
@h-kataria I guess it is beneficial to have these checks in the controller as well for cases if somebody would perform the controller action but not from the toolbar button, but manually. |
8ac0f43
to
52f1f9d
Compare
@h-kataria That wouldn't stop users from being able to open the screen manually.. But then again, if they do, it just won't work for them.. Shouldn't be a security issue, agreed :) Then again, it makes it clearer what is really needed by that screen.. |
in new cloud subnet form
in new network router form Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1526803
Form taken into account: cloud network new form cloud subnet new form network router new form
Form taken into account: cloud network new form cloud subnet new form network router new form Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1520651
52f1f9d
to
a7f3c5c
Compare
Checked commits lpichler/manageiq-ui-classic@994be6f~...a7f3c5c with ruby 2.3.3, rubocop 0.52.0, haml-lint 0.20.0, and yamllint 1.10.0 spec/controllers/cloud_network_controller_spec.rb
spec/controllers/cloud_subnet_controller_spec.rb
spec/controllers/network_router_controller_spec.rb
|
(restarted travis after #3227, hoping for green) |
@himdel it is green 👍 |
…product_feature_for_cloud_network_new_form Require privilege network providers and cloud tenants for new cloud network, cloud subnet, network router form (cherry picked from commit f244a4e) https://bugzilla.redhat.com/show_bug.cgi?id=1534057
Gaprindashvili backport details:
|
imagine that you are the user without allowed section network providers.
then when you go to
Network -> Networks|Subnets|Network Routers-> Add new
and select any network provider, it will end with error(there is video in BZ)so I am adding the assert for this feature and I am adding the method role_allows - it check if user has feature related to Network Providers(ems_network_show_list)
@miq-bot assign @himdel
@miq-bot add_label bug, blocker, gaprindashvili/yes
Links
https://bugzilla.redhat.com/show_bug.cgi?id=1526803