foreman icon indicating copy to clipboard operation
foreman copied to clipboard

Proxy used taxonomy ids

Open adamruzicka opened this issue 6 months ago • 4 comments

TODOs:

  • [ ] ? drop SmartProxy#taxonomy_foreign_conditions which is wrong anyway?
  • [x] Set up smart proxy references in katello https://github.com/Katello/katello/pull/10833
  • [x] Set up smart proxy references in openscap https://github.com/theforeman/foreman_openscap/pull/555

adamruzicka avatar Jan 03 '24 17:01 adamruzicka

Is this your original intention?

That sounds about right

adamruzicka avatar Apr 15 '24 14:04 adamruzicka

Not entirely sure it's related to this PR, but I see I can give the proxy more visibility than I have: image

This user has permissions only for empty_org, but he can assign also default_org to the proxy, although he is not able to select it in the selector.

ShimShtein avatar Apr 18 '24 15:04 ShimShtein

What exact roles or permissions did you give to that user? If I give the user the org admin role then I can reproduce both with and without this patch. Apparently as long as the user has a role grants them the assign_organizations permission, they'll be able to assign organizations which they can't see, which is unfortunate but not really related to what I'm trying to solve here.

adamruzicka avatar Apr 19 '24 07:04 adamruzicka

I have tried it with org_admin role indeed.

ShimShtein avatar Apr 24 '24 14:04 ShimShtein