-
Notifications
You must be signed in to change notification settings - Fork 3.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add better error message for wfjt create 403 #15309
Add better error message for wfjt create 403 #15309
Conversation
7ee07dc
to
c17dc82
Compare
c17dc82
to
c1ff210
Compare
c1ff210
to
0078f9e
Compare
return False | ||
|
||
if not self.check_related('execution_environment', ExecutionEnvironment, data, role_field='read_role'): | ||
self.messages['execution_environment'] = [_('You do not have read_role to the execution environment')] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Wait, this is confusing. There actually isn't a read_role for EEs.
They don't have permission to view the EE.
Unit/Functional test for this would also be nice. |
wfjt.admin_role.members.add(rando) | ||
access = WorkflowJobTemplateAccess(rando, save_messages=True) | ||
assert not access.can_add({'name': 'without org'}) | ||
assert 'An organization is required to create a workflow job template for normal user' in access.messages['organization'] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
SUMMARY
More detail around when non super admin user trying to create WFJT without an org
JIRA: https://issues.redhat.com/browse/AAP-25635
ISSUE TYPE
COMPONENT NAME
AWX VERSION
ADDITIONAL INFORMATION