Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Won't Fix
-
Affects Version/s: 2.1.0
-
Fix Version/s: 2.1.0
-
Component/s: None
-
Labels:None
-
Environment:
Any system that has been migrated from 2.0.2.1 to Cumberland. This bug was found on aq-dev2-front1
-
Sprint:Sprint 10 - Cumberland, Sprint 11 - Cumberland
Description
I logged in with one of the reseller users that was made on 2.0.2.1 and migrated to 2.1 (I changed the email in the db and hit forgot password). The user is able to get a token, but unable to log into the reseller UI.
Problem: All migrated reseller users belong only to the 'users' group (which doesn't even have the 'user' role). The 'reseller-ui-execute' permission is only assigned to the 'reseller' role but none of the migrated reseller users have the 'reseller' role or belong to a group that does. Attaching the stack trace for a login.
Solution: All reseller users have been added to the their reseller's group (see smb.assigned_members and smb.resellers.group_id). Each reseller group has the 'user' role, and the 'reseller' role. The 'reseller' role is assigned the 'reseller-ui-execute' permission and therefore all reseller users may now view the reseller ui.
