ManageIQ / manageiq

ManageIQ Open-Source Management Platform
https://manageiq.org
Apache License 2.0
1.35k stars 898 forks source link

The user is not authorized for this task or item. [catalog/x_show] #22538

Open sswynghedauwe opened 1 year ago

sswynghedauwe commented 1 year ago

Hello every one,

I have deployed a manageiq environment consisting of 3 Worker (vSphere Oparin-1.1 appliances) with a PostgreSQL database on Debian 11. Everything is functioning correctly after some bug fixes (thanks to the community). However, there is still a persistent issue. When a user selects services and all the services appear, if they click directly on the name of the catalog item (1), the error "The user is not authorized for this task or item. [catalog/x_show]" appears. image If the user selects the operating system from the Service Catalog menu, the description of the selected OS appears as it should. Here are the Python logs logs_python.txt Here are the permissions of the role used: image image image

I checked the user permissions, and when admin rights are given, there is no error message. If you have any ideas, I'm open to suggestions. Thank you for everything you do

ps: tell me if you need more informations.

jbarson47 commented 1 year ago

Ran into this issue recently in one of our ManageIQ deployments. Our fix was adding the Service > Catalogs Explorer > Catalogs > View permission for the user role experiencing the issue, which resolved the error.

sswynghedauwe commented 1 year ago

Hello, yes with adding the Service > Catalogs Explorer > Catalogs > View permission that work but, the catalog appear and we have the same issue when we clik on catalog items : image

jbarson47 commented 1 year ago

That would need the same view permission, just for the different object. Since that's a catalog item rather than a catalog, the separate Service > Catalogs Explorer > Catalog Items > View Catalog Items permission would need to be enabled.

Fryguy commented 1 year ago

@jeffibm Can you take a look at this one? Sounds like an RBAC issue, possibly with the API?

jeffibm commented 1 year ago

Need help in debugging this -

Steps I went through -

After giving permission to catalogs explorer, am seeing this. My services page are still blank. image

image

sswynghedauwe commented 1 year ago

hi,

I use Tags set on groups : image

and this tags was set on the catalogue item : image

miq-bot commented 1 year ago

This issue has been automatically marked as stale because it has not been updated for at least 3 months.

If you can still reproduce this issue on the current release or on master, please reply with all of the information you have about it in order to keep the issue open.

Thank you for all your contributions! More information about the ManageIQ triage process can be found in the triage process documentation.

miq-bot commented 9 months ago

This issue has been automatically marked as stale because it has not been updated for at least 3 months.

If you can still reproduce this issue on the current release or on master, please reply with all of the information you have about it in order to keep the issue open.

miq-bot commented 6 months ago

This issue has been automatically marked as stale because it has not been updated for at least 3 months.

If you can still reproduce this issue on the current release or on master, please reply with all of the information you have about it in order to keep the issue open.

miq-bot commented 3 months ago

This issue has been automatically marked as stale because it has not been updated for at least 3 months.

If you can still reproduce this issue on the current release or on master, please reply with all of the information you have about it in order to keep the issue open.

miq-bot commented 5 hours ago

This issue has been automatically marked as stale because it has not been updated for at least 3 months.

If you can still reproduce this issue on the current release or on master, please reply with all of the information you have about it in order to keep the issue open.