Foreman role to view tasks for non-privileged user?

Dear List,

I need to create a non-privileged user in Foreman with permission to see
all foreman-tasks and I could not been able to find the role that grants it.
I have tried to use the already existing roles "Viewer", "Host Viewer" and
I have create a new role called "View Tasks" with "view_tasks,
access_dashboard" permissions but no way, when I assign that roles to the
new non-privileged user, that user has not access to foreman tasks.

The only way that I have been able to grant access to that user to foreman
tasks is clicking the "Administator" box on the user profile, but of course
I do not want to provide that right to the user.

There is a way to asign rights to a non-privileged user to view the foreman
tasks ?

Many thanks in advance for your help,
Benja

··· --

> Dear List,
>
> I need to create a non-privileged user in Foreman with permission to see
> all foreman-tasks and I could not been able to find the role that grants it.
> I have tried to use the already existing roles "Viewer", "Host Viewer" and
> I have create a new role called "View Tasks" with "view_tasks,
> access_dashboard" permissions but no way, when I assign that roles to the
> new non-privileged user, that user has not access to foreman tasks.
>
> The only way that I have been able to grant access to that user to foreman
> tasks is clicking the "Administator" box on the user profile, but of course
> I do not want to provide that right to the user.
>
> There is a way to asign rights to a non-privileged user to view the foreman
> tasks ?

Yes, in the new role you've created "View tasks", add a filter. This
filter must have the Resource type "Foreman_tasks/task" and permissions
'view_foreman_tasks'.
You can also add the permission 'edit_foreman_tasks', but it's a bit
dangerous as it allows users to modify any task, make sure to limit it
by unchecking unlimited and writing a filter.

If I'm not wrong, Foreman tasks ships with a 'Tasks reader' and 'Tasks manager'
role you could use too.

I tried on 1.7.3 creating my own role with these filters and the
permission was properly granted.

Let us know if that helps!

··· On 04/09, benjamin.chardi@gmail.com wrote: > > Many thanks in advance for your help, > Benja > -- > > -- > You received this message because you are subscribed to the Google Groups "Foreman users" group. > To unsubscribe from this group and stop receiving emails from it, send an email to foreman-users+unsubscribe@googlegroups.com. > To post to this group, send email to foreman-users@googlegroups.com. > Visit this group at http://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/d/optout.


Daniel Lobato Garcia

@eLobatoss
blog.daniellobato.me
daniellobato.me

GPG: http://keys.gnupg.net/pks/lookup?op=get&search=0x7A92D6DD38D6DE30
Keybase: https://keybase.io/elobato