freeipa

#5130 non-admin users cannot search hbac rules
Closed: Fixed Opened by pvoborni.

Closed: Fixed
Reopen Issue

hbacrule has it default attributes (which are used in search) attribute 'memberhostgroup' this attr is not in ACI nor in schema. Therefore all searches with filled filter will fail.

Similar issue as in #5055

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1243261 (Red Hat Enterprise Linux 7)

master:

  • 2e80645ef21ff6dbcc1645caacda02e8aac8226a fix hbac rule search for non-admin users

ipa-4-2:

  • 6ead80d9ba6b775a6df3ba76b4d717050311b762 fix hbac rule search for non-admin users

master:

  • a0ce9e6b09f8e35284bc8c97bd63d1e019ca8142 fix selinuxusermap search for non-admin users

ipa-4-2:

  • c10de0aa91a5a10588aec56955f77bb636162efc fix selinuxusermap search for non-admin users

Metadata Update from @pvoborni:
- Issue assigned to pvoborni
- Issue set to the milestone: FreeIPA 4.2.1

master:

  • 1cca6098576d15bdf81669f691e09934a9c4124f ipatests: Test that non admin user can search hbac rule.

ipa-4-9:

  • 3599a4a7e35baa8b936b2c00abe4827be5473212 ipatests: Test that non admin user can search hbac rule.

ipa-4-10:

  • 051bbe36dce57837bd1769aa4a88569e39565774 ipatests: Test that non admin user can search hbac rule.
Metadata
None
None
None
Normal
defect
IPA
1
mbasti
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.