Project

General

Profile

Actions
Copy link

Bug #8673

closed

[RBAC] A user should not be able to create a role that exceeds their own permissions.

Added by Thomas McKay over 9 years ago. Updated about 8 years ago.

Status:
Duplicate
Priority:
Normal
Assignee:
-
Category:
Users, Roles and Permissions
Target version:
-
Difficulty:
Triaged:
Bugzilla link:
1173352
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

If a user is given role creation permissions, the roles they create should not have permissions that exceed their own. (eg. If a user has view hosts, then edit hosts should not be available to assign.)

Actions
Copy link

Also available in: Atom PDF