[Katello 2.4] User cannot see subscriptions after upgrade, only admin can

Hello,

i created a role, called "Katello" in Katello 2.3, that had the minimum
required privileges to operate. After the upgrade to 2.4, when i click on
"Red Hat Subscriptions" i get:

You currently don't have any Subscriptions, you can add Subscriptions by
importing a manifest using the button on the right labeled 'Manage
Manifest'.

I can, without issues, click refresh manifest, and see Manifest History.

Additionally if I select a content host, i cannot see what are the attached
licenses, but on "Add" tab i see all the licenses (the ones that are
available and the ones that are assigned to that content host).

To allow users to see the licensing, I have to flag "Administrator".

I had tried with hammer subscriptions list with the non-admin username and
i can get the list of the subscriptions!

These are the filters applied to the role:

Lifecycle Environment: promote_or_remove_content_views_to_environments,
destroy_lifecycle_environments, edit_lifecycle_environments,
create_lifecycle_environments, view_lifecycle_environments
Activation Keys: destroy_activation_keys, edit_activation_keys,
create_activation_keys, view_activation_keys
Product and Repositories: sync_products, destroy_products, edit_products,
create_products, view_products
Common parameter: destroy_globals, edit_globals, create_globals,
view_globals
Config group: destroy_config_groups, edit_config_groups,
create_config_groups, view_config_groups
Content Views: promote_or_remove_content_views, publish_content_views,
destroy_content_views, edit_content_views, create_content_views,
view_content_views
Sync Plans: destroy_sync_plans, edit_sync_plans, create_sync_plans,
view_sync_plans
Content Host: destroy_content_hosts, edit_content_hosts,
create_content_hosts, view_content_hosts
GPG Keys: destroy_gpg_keys, edit_gpg_keys, create_gpg_keys, view_gpg_keys
Host Collections: destroy_host_collections, edit_host_collections,
create_host_collections, view_host_collections
Location: edit_locations, destroy_locations, create_locations,
assign_locations, view_locations
Organisation: edit_organizations, destroy_organizations,
create_organizations, delete_manifest, import_manifest,
unattach_subscriptions, attach_subscriptions, view_subscriptions,
assign_organizations, view_organizations
(Miscellaneous): view_tasks, my_organizations, view_statistics,
view_plugins, view_foreman_host_rundeck, view_content_reports,
access_settings, access_dashboard

Can anyone help me troubleshooting this issue?

Thank you,

Luca

Luca,

have you tried running foreman-rake katello:reindex ?

John Mitsch
Red Hat Engineering
(860)-967-7285
irc: jomitsch

··· On Fri, May 20, 2016 at 1:17 PM, Luca Lorenzetto wrote:

Hello,

i created a role, called “Katello” in Katello 2.3, that had the minimum
required privileges to operate. After the upgrade to 2.4, when i click on
"Red Hat Subscriptions" i get:

You currently don’t have any Subscriptions, you can add Subscriptions by
importing a manifest using the button on the right labeled ‘Manage
Manifest’.

I can, without issues, click refresh manifest, and see Manifest History.

Additionally if I select a content host, i cannot see what are the
attached licenses, but on “Add” tab i see all the licenses (the ones that
are available and the ones that are assigned to that content host).

To allow users to see the licensing, I have to flag “Administrator”.

I had tried with hammer subscriptions list with the non-admin username and
i can get the list of the subscriptions!

These are the filters applied to the role:

Lifecycle Environment: promote_or_remove_content_views_to_environments,
destroy_lifecycle_environments, edit_lifecycle_environments,
create_lifecycle_environments, view_lifecycle_environments
Activation Keys: destroy_activation_keys, edit_activation_keys,
create_activation_keys, view_activation_keys
Product and Repositories: sync_products, destroy_products, edit_products,
create_products, view_products
Common parameter: destroy_globals, edit_globals, create_globals,
view_globals
Config group: destroy_config_groups, edit_config_groups,
create_config_groups, view_config_groups
Content Views: promote_or_remove_content_views, publish_content_views,
destroy_content_views, edit_content_views, create_content_views,
view_content_views
Sync Plans: destroy_sync_plans, edit_sync_plans, create_sync_plans,
view_sync_plans
Content Host: destroy_content_hosts, edit_content_hosts,
create_content_hosts, view_content_hosts
GPG Keys: destroy_gpg_keys, edit_gpg_keys, create_gpg_keys,
view_gpg_keys
Host Collections: destroy_host_collections, edit_host_collections,
create_host_collections, view_host_collections
Location: edit_locations, destroy_locations, create_locations,
assign_locations, view_locations
Organisation: edit_organizations, destroy_organizations,
create_organizations, delete_manifest, import_manifest,
unattach_subscriptions, attach_subscriptions, view_subscriptions,
assign_organizations, view_organizations
(Miscellaneous): view_tasks, my_organizations, view_statistics,
view_plugins, view_foreman_host_rundeck, view_content_reports,
access_settings, access_dashboard

Can anyone help me troubleshooting this issue?

Thank you,

Luca


You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Hello John,

sorry for the late response, i was out of office. I'm running now
reindex, i'll try again after the end.

Consider also that my users are from ldap.

Luca

··· On Fri, May 20, 2016 at 7:22 PM, John Mitsch wrote: > > Luca, > > have you tried running foreman-rake katello:reindex ? >


"E’ assurdo impiegare gli uomini di intelligenza eccellente per fare
calcoli che potrebbero essere affidati a chiunque se si usassero delle
macchine"
Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo.
Ma il problema è che i libri sono tutti sparsi sul pavimento"
John Allen Paulos, Matematico (1945-vivente)

Luca ‘remix_tj’ Lorenzetto, http://www.remixtj.net , lorenzetto.luca@gmail.com

Hello,

nothing changed. The output of foreman-rake is this:

[root@foreman-server ~]# foreman-rake katello:reindex --trace --verbose

** Invoke katello:reindex (first_time)
** Invoke environment (first_time)
** Execute environment
** Invoke katello:check_ping (first_time)
** Execute katello:check_ping
** Execute katello:reindex
Re-indexing Katello::Rpm

[root@foreman-server ~]#

Looks like that is not completing. Do i need to stop katello before?

··· -- "E' assurdo impiegare gli uomini di intelligenza eccellente per fare calcoli che potrebbero essere affidati a chiunque se si usassero delle macchine" Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo.
Ma il problema è che i libri sono tutti sparsi sul pavimento"
John Allen Paulos, Matematico (1945-vivente)

Luca ‘remix_tj’ Lorenzetto, http://www.remixtj.net , lorenzetto.luca@gmail.com