Project

General

Profile

Bug #9936

Users with "node_all" security role can not change Agent Policy Mode

Added by Ilan COSTA 10 months ago. Updated 3 months ago.

Status:
Released
Priority:
1
Category:
Web - Nodes & inventories
Target version:
Target version (plugin):
Severity:
User visibility:
Effort required:
Priority:
0

Description

Hi,

I have users with those roles : node_all,group_read,configuration_read,rule_read,directive_read,technique_read

Despite "node_all" role and "allow override" in global settings, users can not change Agent Policy Mode on nodes.

Adding "administration_read" role let users change Agent Policy Mode.

It seems that this behaviour appears after upgrading to rudder server 4.0.2.


Subtasks

Bug #11075: Users with "node_all" security role can not change Agent Policy ModeReleasedNicolas CHARLES

Associated revisions

Revision f7156a68
Added by Vincent MEMBRÉ 9 months ago

Fixes #9936: Users with "node_all" security role can not change Agent Policy Mode

History

#1 Updated by Vincent MEMBRÉ 9 months ago

  • Assignee set to Vincent MEMBRÉ
  • Priority changed from N/A to 1
  • Target version set to 4.0.3

Indeed you should be able to change the state of the node policy mode without being able to "read_administation" if you can modify nodes

#2 Updated by Vincent MEMBRÉ 9 months ago

  • Status changed from New to In progress

#3 Updated by Vincent MEMBRÉ 9 months ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Vincent MEMBRÉ to François ARMAND
  • Pull Request set to https://github.com/Normation/rudder/pull/1509

#4 Updated by Vincent MEMBRÉ 9 months ago

  • Status changed from Pending technical review to Pending release
  • % Done changed from 0 to 100

#5 Updated by Vincent MEMBRÉ 9 months ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 4.0.3 and 4.1.0~beta3 which were released today.

#6 Updated by Benoît PECCATTE 9 months ago

  • Found in version (s) 4.0.2 added

#7 Updated by Benoît PECCATTE 9 months ago

  • Found in version(s) old deleted (4.0.2)

#8 Updated by Ilan COSTA 5 months ago

  • Priority set to 0

Bug is still present in 4.1.3 and workaround with "administration_read" does not work

Also available in: Atom PDF