adhoc execution page shows kill button when it is not authorized
Reported by Greg Schueler | February 21st, 2012 @ 11:29 AM | in Rundeck 1.4.3 (closed)
- Issue Type: Bug
- Rundeck version: 1.4.2
Issue:
Viewing an execution page, the Kill button is shown even if adhoc kill is not authorized. The kill action is not performed due to authorization rule, but the button is still shown as if it were.
Reproduce:
- grant all actions to a user except the 'kill' action for adhoc jobs.
- run an adhoc job that takes some time.
- click on the running job to view the execution page
- the kill button is shown incorrectly
clicking the kill button doesn't perform the kill action because it is not authorized, but the button is still shown.
Comments and changes to this ticket
-
Greg Schueler April 27th, 2012 @ 01:50 PM
- State changed from new to needs_verification
- Milestone order changed from 6 to 0
(from [08ad3ecf4df001130bc70b25ac8c740657c0979e]) Fix authorization checks for adhoc executions
[#526 state:needs_verification] https://github.com/dtolabs/rundeck/commit/08ad3ecf4df001130bc70b25a...
-
Greg Schueler June 18th, 2012 @ 05:43 PM
kill button is still shown in Run page GUI, even though not authorized
-
Greg Schueler June 18th, 2012 @ 06:11 PM
(from [aef24d15073f25d5d43b162875b5fabb9d2bdd89]) Update auth checks in fragment view of execution
[#526] https://github.com/dtolabs/rundeck/commit/aef24d15073f25d5d43b16287...
-
Greg Schueler June 19th, 2012 @ 07:46 PM
- State changed from needs_verification to resolved
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues