Project

General

Profile

action #167818

Updated by okurz 2 months ago

## Observation  
 While logged-in as an Operator and trying to access Activity View (https://openqa.opensuse.org/admin/activity_view) and OBS Sync (https://openqa.opensuse.org/admin/obs_rsync) results in "Forbidden" message in web browser. 

 Rest other menu options are accessible such as: 
 - https://openqa.opensuse.org/admin/products 
 - https://openqa.opensuse.org/admin/machines 
 - https://openqa.opensuse.org/admin/test_suites 

 ## Acceptance criteria 
 * **AC1:** The activity view is acessible by all logged in users that can have any activity. 
 * **AC2:** The menu entry for the OBS Sync plugin is only visible to users that can access it. 
 * **AC3:** The audit log is still only accessible by admins. 

 ## Suggestions 
 * As the activity view relies on the audit log we need to change that implementation, e.g. provide a subset of the audit log composed of only the current user

Back