Hi,

I have just find this:


Upgrade warnings 
>    
>    - CVE-2016-8634 
>    
> <https://theforeman.org/security.html#CVE-2016-8634:organizations/locationswizardmayrunstoredXSSinname>
>  
>    is fixed on this version. This means users not in any organization or 
>    location will not be able to see anything unless they are administrators.
>    - Roles ‘Manager’ and ‘Viewer’ used to only have permissions related 
>    to Foreman itself but no permissions related to Foreman plugins. This 
>    decision was taken because users found confusing that “Viewer” or 
> “Manager” 
>    roles would not contain all permissions.
>
> https://theforeman.org/manuals/1.15/index.html#Upgradewarnings

This has to do with my issue?



Le vendredi 20 octobre 2017 14:31:38 UTC+2, Sam Amara a écrit :
>
> Hi,
>
> I am bad in RubyonRails :(
> How can I add permissions to an existing role? I'm blocked to continue 
> foreman installation. 
>
> Thank you.
>
> Le mercredi 18 octobre 2017 08:44:25 UTC+2, Ondrej Prazak a écrit :
>>
>> Hi,
>> the seeds from foreman_salt in:
>>
>> /opt/theforeman/tfm/root/usr/share/gems/gems/foreman_salt-8.0.2/db/seeds.
>> d/75-salt_seeds.rb
>>
>> try to add permissions from foreman_salt to an existing role [1] which is 
>> locked. A small patch for foreman_salt will be needed to fix this, I 
>> already created a ticket [2]. Without foreman_salt, the seeds should pass.
>>
>> Hope this helps,
>> Ondrej Prazak
>>
>> [1] 
>> https://github.com/theforeman/foreman_salt/blob/8.0.2/db/seeds.d/75-salt_seeds.rb#L5-L10
>> [2] http://projects.theforeman.org/issues/21372 
>>
>> On Wed, Oct 18, 2017 at 1:11 AM, Michael Hurn <[email protected]> 
>> wrote:
>>
>>> Two things that may help until an expert can give some imput
>>>
>>> I recommend all ways using FQDNs for the host and server names. It’s ok 
>>> if you do not have DNS just add the entries to the local hosts file
>>>
>>> Also did you set up the foreman account in Postgres? When you use an 
>>> external db the user account and access permissions need to be in place.
>>>
>>> Regards, Mike.
>>>
>>> --
>>> You received this message because you are subscribed to the Google 
>>> Groups "Foreman users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to [email protected].
>>> To post to this group, send email to [email protected].
>>> Visit this group at https://groups.google.com/group/foreman-users.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Reply via email to