Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

ROLE_PROVISION doesn't work on the UI when the ACL feature is enabled.

Description

When having ACLs enabled (org.opennms.web.aclsEnabled=true, in opennms.properties), you'll get Access Denied when trying to load the requisitions UI, using a user with ROLE_PROVISION in users.xml.

Access to the ReST API works as expected.

I figured that if I disable ACL, I can now access the requisitions UI.

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Show:

Alejandro Galue April 17, 2019 at 11:54 AM

, I agree, let's close it as "cannot reproduce".

Christian Pape April 17, 2019 at 6:44 AM
Edited

At the moment I've no idea how to filter in the requisition UI because you have to assure that a user can only create, edit and delete nodes associated with categories he is allowed to see. In the current UI you create a node before adding categories and the requisition's model can contain nodes belonging to different categories. Maybe this can be addressed when the UI is reworked for the meta-data stuff...

However, I would be in favor of closing the issue with "Cannot Reproduce" because I could not recreate the problem in the foundation-2017 or release-24.0.0 branch. , is that okay from your point of view?

Alejandro Galue April 16, 2019 at 6:19 PM

That's a very good question. To be honest I'm not sure. Guess worth asking on chat to hear opinions.

Christian Pape April 16, 2019 at 4:35 PM

I've tested different nodes/categories for the landing page and node page, so yes the ACL feature work. The requisition UI should not filter any nodes, right?

Alejandro Galue April 16, 2019 at 4:06 PM

Have you added multiple nodes with the expected categories to demonstrate that the ACL feature works ?

In order to verify ACL, you need to associate node categories to user groups, then add a few nodes with the appropriate categories, and then verify if the users can only see what they expect to see.

Makes sense ?

Cannot Reproduce

Details

Assignee

Reporter

Labels

Components

Sprint

Fix versions

Affects versions

Priority

PagerDuty

Created December 14, 2017 at 8:17 PM
Updated April 17, 2019 at 1:52 PM
Resolved April 17, 2019 at 1:52 PM