KSC report viewing does not enforce ACLs

Description

Steps to reproduce:

1a. Create group "canhas" with all node categories included; add user "jeffg" to this group
1b. Create group "nocanhas" with only "Production" node category; add user "rjeffg" to this group
2. Add node 1 to node categories "Servers", "Production"; add node 2 to categories "Servers", "Development"
3. Log in as "jeffg", create a KSC report that includes resources from both node 1 and node 2
4. Log out and log in as "rjeffg", view KSC report created in step 3, charts from both nodes are visible despite node 2 being otherwise hidden from this user's view.

Environment

Operating System: All Platform: PC

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Details

Assignee

Reporter

Labels

Components

Affects versions

Priority

PagerDuty

Created April 27, 2009 at 12:01 PM
Updated September 21, 2021 at 6:22 PM
Loading...