Project

Profile

Help

Actions
Send by e-mail Copy link

Story #8160

closed

as a user with 'auth.change_group' permission i can POST /pulp/api/v3/groups/3/users/

Added by dkliban@redhat.com almost 4 years ago. Updated almost 3 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
mdellweg
Category:
-
Sprint/Milestone:
3.10.0
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Quarter:

Description

Looks like pulpcore 3.10.0.dev is not providing a default access policy for /pulp/api/v3/groups/<id>/users/ and as a result non-admin users can't modify users in a group using that URL.

Related issues

Copied from Pulp - Story #8159: as a user with 'auth.view_group' permission i can GET /pulp/api/v3/groups/CLOSED - CURRENTRELEASEmdellweg

Actions
Actions
Send by e-mail Copy link

Also available in: Atom PDF