Filter restricted user to owned or hostgroup VM

Hello,

I have upgraded foreman 1.4 to 1.5

In 1.4 users could be restricted by owned machines, but in 1.5 filters are
now in the roles.

I haven't found a way to have the same behavior for a user to see only his
owned machines ?

I have tried to restrict to a hostgroup at least but I got a strange
behavior the user can still see all the machines even if he cant edit them
(I have missed a permission parameter ?)

This is what I see when i logon as a simple user :

<https://lh6.googleusercontent.com/-rhr0KyJFRbg/U5Ag1DNlydI/AAAAAAAAAlQ/L8BBGizdC0c/s1600/RolesForeman_2014_06_05_09_27_46_Hôtes.jpg>

There are the permissions I gave for this user role

<https://lh6.googleusercontent.com/-sbXIYyds7MM/U5Ag_XLYDFI/AAAAAAAAAlc/tc3GG3h1GCY/s1600/RolesUser_2014_06_05_09_27_46_Hôtes.jpg>

Thanks for your advices about restrict access for user with foreman 1.5

Hi Alexandre,

We ship an "Anonymous" role which is built in and applies to every user
(the name is misleading), which by default contains an unlimited "view
hosts" permission. This is probably overriding your own restrictive role.

Try editing the anonymous role and removing the built in permission.
We'll likely make this change in 1.6 too.

Cheers,

··· -- Dominic Cleal Red Hat Engineering

On 05/06/14 08:53, Alexandre L wrote:

Hello,

I have upgraded foreman 1.4 to 1.5

In 1.4 users could be restricted by owned machines, but in 1.5 filters
are now in the roles.

I haven’t found a way to have the same behavior for a user to see only
his owned machines ?

I have tried to restrict to a hostgroup at least but I got a strange
behavior the user can still see all the machines even if he cant edit
them (I have missed a permission parameter ?)

This is what I see when i logon as a simple user :

https://lh6.googleusercontent.com/-rhr0KyJFRbg/U5Ag1DNlydI/AAAAAAAAAlQ/L8BBGizdC0c/s1600/RolesForeman_2014_06_05_09_27_46_Hôtes.jpg

There are the permissions I gave for this user role

https://lh6.googleusercontent.com/-sbXIYyds7MM/U5Ag_XLYDFI/AAAAAAAAAlc/tc3GG3h1GCY/s1600/RolesUser_2014_06_05_09_27_46_Hôtes.jpg

Thanks for your advices about restrict access for user with foreman 1.5


You received this message because you are subscribed to the Google
Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-users+unsubscribe@googlegroups.com
mailto:foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com
mailto:foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.