I see that a user with limited permissions is unable to see any sites. Even though they are under the right Client.

Steps to reproduce:

  1. Start with a clean aegir install with the 'Hosting Clients' feature enabled
  2. Create a user with only the 'aegir client' role
  3. Create a new 'Client' node
  4. Add new user to the client
  5. Create a site (as admin) for the new client.
  6. login as the new user
  7. The new site is not visible in the list of sites

The views module seems to thoroughly check the node_grants... but we only grated something on the site automatically.

On the platform you could go to the 'Clients' tab and allow access for the client.
But views also checks the server ...

CommentFileSizeAuthor
#2 user_with_only_the-2451731-2.patch3.68 KBhelmo
#1 user_with_only_the-2451731-1.patch2.54 KBhelmo

Comments

helmo’s picture

helmo commented
StatusFileSize
new user_with_only_the-2451731-1.patch2.54 KB

Here's a patch I'm working on.

helmo’s picture

helmo commented
StatusFileSize
new user_with_only_the-2451731-2.patch3.68 KB

I've now two possible solutions:

1. patch the node_grants, and default add permission to 'view server' to the 'aegir client' role.

2)
Remove the relation to db_server from the 'hosting site list' view.
It's currently not used.... so out of the box there would be no impact.

formatC'vt’s picture

formatC'vt commented
Status: Active » Reviewed & tested by the community

patch 2 works fine for me, thx.

gboudrias’s picture

gboudrias commented
Issue tags: +Aegir 3.1
gboudrias’s picture

gboudrias commented
Status: Reviewed & tested by the community » Fixed

Pushed patched 2.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.