Problem:
I intended to create a role that allows users to trigger a host rebuild (set a host to “build” mode) without granting full edit_hosts privileges. However, it appears that the build_hosts permission does not work unless the user is also granted edit_hosts. This effectively means that users can modify all host attributes, which is not good for us.
The error says that the user could “not have access to specified organizations or locations”, but I’m pretty sure the user does.
Expected outcome:
Users with build_hosts should be able to set a host into build mode without needing edit_hosts.
Foreman and Proxy versions:
3.13
Foreman and Proxy plugin versions:
Distribution and version:
Other relevant data:
@errors=[#<ActiveModel::Error attribute=base, type=You don’t have permission edit_hosts with attributes that you have specified or you don’t have access to specified organizations or locations, options={}>]>