Role filter missing for content hosts

Problem:

I created several user groups in order to allow colleagues just managing their systems. In detail, I created a hostgroup and a role with various filter that limits viewing/managing CVs etc. to that hostgroup/usergroup combination.

Anyhow I cannot find filters for the “Content Hosts” Resource Type - there are filters for Hosts, User Groups, etc., but no Content Hosts. Is this a missing functionality or am I missing something here?

I tested it both on Foreman/Katello and Red Hat Satellite 6 (see versions below).

Expected outcome:

There should be a filter type for the Resource Type Content Hosts.

Foreman and Proxy versions:

Foreman on CentOS 7:

foreman# rpm -qi foreman{,-proxy}
Name        : foreman
Version     : 2.3.5
Release     : 1.el7
Architecture: noarch
Install Date: Do 29 Jul 2021 16:59:53 CEST
Group       : Applications/System
Size        : 110478303
License     : GPLv3+ with exceptions
Signature   : RSA/SHA256, Mi 09 Jun 2021 16:37:18 CEST, Key ID c101586be0745924
Source RPM  : foreman-2.3.5-1.el7.src.rpm
Build Date  : Mi 09 Jun 2021 15:01:36 CEST
Build Host  : koji.katello.org
Relocations : (not relocatable)
Packager    : Koji
Vendor      : Koji
URL         : https://theforeman.org
Summary     : Systems Management web application
Description :
Foreman is aimed to be a Single Address For All Machines Life Cycle Management.
Foreman is based on Ruby on Rails, and this package bundles Rails and all
plugins required for Foreman to work.
Name        : foreman-proxy
Version     : 2.3.5
Release     : 1.el7
Architecture: noarch
Install Date: Do 29 Jul 2021 17:00:21 CEST
Group       : Applications/System
Size        : 414956
License     : GPLv3+
Signature   : RSA/SHA256, Mi 09 Jun 2021 16:37:07 CEST, Key ID c101586be0745924
Source RPM  : foreman-proxy-2.3.5-1.el7.src.rpm
Build Date  : Mi 09 Jun 2021 14:49:53 CEST
Build Host  : koji.katello.org
Relocations : (not relocatable)
Packager    : Koji
Vendor      : Koji
URL         : https://theforeman.org/projects/smart-proxy
Summary     : Restful Proxy for DNS, DHCP, TFTP, PuppetCA and Puppet
Description :
Manages DNS, DHCP, TFTP and puppet settings though HTTP Restful API
Mainly used by the foreman project (https://theforeman.org)

Red Hat Satellite 6:

satellite# rpm -qi foreman{,-proxy}
Name        : foreman
Version     : 2.3.1.21
Release     : 1.el7sat
Architecture: noarch
Install Date: Wed 14 Jul 2021 10:27:24 AM CEST
Group       : Applications/System
Size        : 110736765
License     : GPLv3+ with exceptions
Signature   : RSA/SHA256, Tue 29 Jun 2021 03:00:07 PM CEST, Key ID 199e2f91fd431d51
Source RPM  : foreman-2.3.1.21-1.el7sat.src.rpm
Build Date  : Thu 27 May 2021 09:54:13 PM CEST
Build Host  : x86-034.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : https://theforeman.org
Summary     : Systems Management web application
Description :
Foreman is aimed to be a Single Address For All Machines Life Cycle Management.
Foreman is based on Ruby on Rails, and this package bundles Rails and all
plugins required for Foreman to work.
Name        : foreman-proxy
Version     : 2.3.1
Release     : 1.el7sat
Architecture: noarch
Install Date: Thu 24 Jun 2021 05:00:03 PM CEST
Group       : Applications/System
Size        : 414959
License     : GPLv3+
Signature   : RSA/SHA256, Mon 08 Feb 2021 05:37:13 PM CET, Key ID 199e2f91fd431d51
Source RPM  : foreman-proxy-2.3.1-1.el7sat.src.rpm
Build Date  : Mon 14 Dec 2020 02:39:05 PM CET
Build Host  : x86-vm-31.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : https://theforeman.org/projects/smart-proxy
Summary     : Restful Proxy for DNS, DHCP, TFTP, PuppetCA and Puppet
Description :
Manages DNS, DHCP, TFTP and puppet settings though HTTP Restful API
Mainly used by the foreman project (https://theforeman.org)

Foreman and Proxy plugin versions:

CentOS 7 + Foreman/Katello:

foreman# rpm -qa|grep foreman
tfm-rubygem-foreman-tasks-core-0.3.4-1.fm2_1.el7.noarch
tfm-rubygem-hammer_cli_foreman_bootdisk-0.3.0-1.el7.noarch
tfm-rubygem-foreman_remote_execution-4.2.2-1.fm2_3.el7.noarch
foreman-proxy-2.3.5-1.el7.noarch
katello.xxx.yyy.de-foreman-proxy-client-1.0-1.noarch
ansiblerole-foreman_scap_client-0.1.0-1.el7.noarch
foreman-release-2.3.5-1.el7.noarch
foreman-dynflow-sidekiq-2.3.5-1.el7.noarch
tfm-rubygem-foreman_ansible-6.1.1-1.fm2_3.el7.noarch
foreman-2.3.5-1.el7.noarch
foreman-service-2.3.5-1.el7.noarch
tfm-rubygem-foreman_ansible_core-4.0.0-1.fm2_3.el7.noarch
foreman-debug-2.3.5-1.el7.noarch
tfm-rubygem-hammer_cli_foreman_docker-0.0.7-1.el7.noarch
tfm-rubygem-foreman-tasks-3.0.6-1.fm2_3.el7.noarch
katello.xxx.yyy.de-foreman-client-1.0-1.noarch
foreman-installer-katello-2.3.5-1.el7.noarch
foreman-vmware-2.3.5-1.el7.noarch
tfm-rubygem-hammer_cli_foreman-2.3.2-1.el7.noarch
tfm-rubygem-hammer_cli_foreman_tasks-0.0.15-1.fm2_2.el7.noarch
foreman-installer-2.3.5-1.el7.noarch
rubygem-foreman_maintain-0.7.10-1.el7.noarch
foreman-postgresql-2.3.5-1.el7.noarch
foreman-cli-2.3.5-1.el7.noarch
katello.xxx.yyy.de-foreman-proxy-1.0-1.noarch
tfm-rubygem-foreman_snapshot_management-2.0.1-1.fm2_3.el7.noarch
tfm-rubygem-foreman_remote_execution_core-1.4.0-1.el7.noarch
foreman-selinux-2.3.5-1.el7.noarch

Red Hat Satellite 6:

satellite# rpm -qa|grep foreman
tfm-rubygem-foreman_theme_satellite-7.0.1.7-1.el7sat.noarch
tfm-rubygem-foreman_discovery-16.3.6-1.el7sat.noarch
foreman-selinux-2.3.1-1.el7sat.noarch
ansiblerole-foreman_scap_client-0.1.0-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_openscap-0.1.12-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_docker-0.0.7-1.el7sat.noarch
foreman-2.3.1.21-1.el7sat.noarch
tfm-rubygem-foreman_rh_cloud-3.0.22-1.el7sat.noarch
tfm-rubygem-foreman_ansible-6.1.1-1.el7sat.noarch
satellite.xxx.yyy.de-foreman-proxy-1.0-1.noarch
tfm-rubygem-foreman_openscap-4.1.3-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_tasks-0.0.15-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_templates-0.2.0-1.el7sat.noarch
tfm-rubygem-foreman-tasks-core-0.3.4-1.el7sat.noarch
puppet-foreman_scap_client-0.4.0-1.el7sat.noarch
tfm-rubygem-foreman-tasks-3.0.6-1.el7sat.noarch
foreman-postgresql-2.3.1.21-1.el7sat.noarch
foreman-gce-2.3.1.21-1.el7sat.noarch
tfm-rubygem-foreman_remote_execution-4.2.3-1.el7sat.noarch
foreman-libvirt-2.3.1.21-1.el7sat.noarch
tfm-rubygem-foreman_bootdisk-17.0.2-2.fm2_1.el7sat.noarch
rubygem-foreman_maintain-0.7.10-1.el7sat.noarch
tfm-rubygem-foreman_hooks-0.3.17-1.el7sat.noarch
foreman-proxy-2.3.1-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_bootdisk-0.3.0-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_discovery-1.0.2-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_virt_who_configure-0.0.7-1.el7sat.noarch
tfm-rubygem-foreman_remote_execution_core-1.4.0-1.el7sat.noarch
foreman-installer-2.3.1.15-1.el7sat.noarch
foreman-vmware-2.3.1.21-1.el7sat.noarch
foreman-dynflow-sidekiq-2.3.1.21-1.el7sat.noarch
foreman-ec2-2.3.1.21-1.el7sat.noarch
tfm-rubygem-foreman_templates-9.0.2-1.el7sat.noarch
foreman-bootloaders-redhat-tftpboot-202005201200-1.el7sat.noarch
satellite.xxx.yyy.de-foreman-client-1.0-1.noarch
tfm-rubygem-foreman_ansible_core-4.0.0-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_remote_execution-0.2.1-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_admin-0.0.9-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_ansible-0.3.2-1.el7sat.noarch
foreman-debug-2.3.1.21-1.el7sat.noarch
foreman-service-2.3.1.21-1.el7sat.noarch
tfm-rubygem-foreman_virt_who_configure-0.5.5-1.el7sat.noarch
foreman-installer-katello-2.3.1.15-1.el7sat.noarch
satellite.xxx.yyy.de-foreman-proxy-client-1.0-1.noarch
foreman-bootloaders-redhat-202005201200-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman-2.3.1-1.el7sat.noarch
foreman-cli-2.3.1.21-1.el7sat.noarch
foreman-openstack-2.3.1.21-1.el7sat.noarch
foreman-ovirt-2.3.1.21-1.el7sat.noarch
tfm-rubygem-foreman_azure_rm-2.1.3-1.el7sat.noarch
tfm-rubygem-hammer_cli_foreman_azure_rm-0.2.0-1.el7sat.noarch

Distribution and version:

CentOS 7.9.2009 (Core) and Red Hat Enterprise Linux Server 7.9 (Maipo)

Other relevant data:

Same question here. Role Content Exporter filters give access to content hosts (filters |view_organizations, |view_content_views,|view_products).

Content Hosts are not a separate model in Katello. A content host is just a Host that has a content facet. Any permissions for hosts apply to all content hosts as well, since content hosts are a type of host.