Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

"Create and Run" is not limited by lack of workflow_execute

#427

If you have the permission workflow_create but not workflow_run, RunDeck will allow you to "Create and Run" a job. It will execute, but afterwards if you try to find it again in the job list, it (correctly) prevents you from executing it at that point.

RunDeck should not allow "Create and Run" for users with workflow_create but not workflow_execute.

Reported by Moses Lei · September 6th, 2011 @ 12:36 AM

State: new
Milestone: Rundeck 1.4
Assigned to: nobody

Activity

  1. Moses Lei
    Moses Lei

    Tested on RunDeck 1.3

    September 6th, 2011 @ 12:37 AM

  2. Greg Schueler
    Greg Schueler
    • State changed from new to open
    • Assigned user set to Greg Schueler

    September 7th, 2011 @ 11:37 AM

  3. Greg Schueler
    Greg Schueler
    • State changed from open to needs_verification

    verify fix provided by new aclpolicy support

    September 9th, 2011 @ 04:19 PM

  4. Greg Schueler
    Greg Schueler
    • State changed from needs_verification to resolved

    verified:

    authorization:
    * resource kind 'job' allowed 'create' * job group "test2.*" denied 'run'

    In the job form I created a job with group "test2/blah" , and clicked Create and Run. It created the job but showed error message that user was not authorized to run the job.

    September 14th, 2011 @ 11:40 AM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.