MAAS users (not admins) can see all node event logs. They only need to be allowed to see their own
Bug #1445939 reported by
Andres Rodriguez
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| MAAS |
Won't Fix
|
High
|
Unassigned | ||
Bug Description
MAAS users that are not admins, can see all of the events in the node event log. Users should not be allowed to see all of the events, but rather, they should only be allowed to see those events that are started by them.
Administrators, on the other hand, should be allowed to see all of the events of a machine.
| Changed in maas: | |
| milestone: | none → 1.8.0 |
| importance: | Undecided → High |
| Changed in maas: | |
| status: | New → Confirmed |
| Changed in maas: | |
| status: | Confirmed → Triaged |
Revision history for this message
| Andres Rodriguez (andreserl) wrote | #2 |
| Changed in maas: | |
| status: | Triaged → Invalid |
| status: | Invalid → Won't Fix |
To post a comment you must log in.
If an admin performs an action on a node owned by a user, it is relevant for the user to see when this action was performed and what the outcome was.
If a user is given ownership of the node, what could there be in the log that they are not allowed to see?