Users can't see or select Instance Group on Job Template

tanganellilore commented 1 year ago

Please confirm the following

[X] I agree to follow this project's code of conduct.
[X] I have checked the current issues for duplicates.
[X] I understand that AWX is open source software provided for free and that I might not receive a timely response.

Bug Summary

Hi team,

I notice that a Normal user with Admin role in a specific inventory, can't see any Instance Group assigned to that inventory.

In my lab, I created to Instance Group for 2 different Network and assign it to Inventory and Organization level. With admin user, obviously, I can see everything and choice correct IG for specific JT, but with a new user, that access to this org and is "Admin" of inventory, I can't see the Instance Group.

This not permit us also to runa specific IG with Normal User on Job template side. The only way is to use multiple inventory with specific IG assigned to it (not usefull in terms of workload).

I notice that in term of "Role" there is no present any role related Instance Group, so we can't assing permission (Read/execute/admin) to specific user, like project, jt and so on.

I don't know if this is a bug or enhancement or both, but probably have some links also with this issue https://github.com/ansible/awx/issues/11910 and https://github.com/ansible/awx/issues/4292

AWX version

21.10.2

Select the relevant components

[X] UI
[X] API
[ ] Docs
[ ] Collection
[ ] CLI
[ ] Other

Installation method

kubernetes

Modifications

no

Ansible version

No response

Operating system

No response

Web browser

Firefox, Chrome

Steps to reproduce

Create a Organization
create Inventory on that org
Create 2 or more Instance
Create 2 or more Instance group and assign on that above instance
Assign Instance Group to Organization and inventory
Create a new user and assign it to that Org
Assign role of Inventory Admin to that user.
Create a Job tempalte and try to select a specific Instance Group.

User can't see any IG

Expected results

Normal user that have inventory admin role, should be able to see Instance Group.

Normal user can be assigned to specific rot, to see the Instance group assigned to Organization where is member or Inventory that can read.

Actual results

User can't see Instance group

Additional information

No response

tanganellilore commented 1 year ago

@shanemcd Can you check this request?

tanganellilore commented 1 year ago

fixed with https://github.com/ansible/awx/pull/13584

ansible / awx