Bug 34958 - Check availability of UMC modules
Check availability of UMC modules
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: ucs-test
UCS@school 3.2 R2
Other Linux
: P5 normal (vote)
: ---
Assigned To: Ammar Najjar
Florian Best
:
Depends on: 37786 36537 37303
Blocks:
  Show dependency treegraph
 
Reported: 2014-05-25 20:24 CEST by Sönke Schwardt-Krummrich
Modified: 2016-11-03 17:37 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2014-05-25 20:24:09 CEST
According to the section "Sichtbarkeit UMC Module" of the product test https://hutten.knut.univention.de/mediawiki/index.php/Produkttests_UCS@school_3.2_R2_Berechtigungskonzept 
it has to be checked if users get only displayed a certain list of UMC modules after login. The list of available UMC modules depends on the user's role (student, teacher, teacher+staff, staff, school admin, domain admin).

The script should check for each role if only the UMC modules noted in the wiki page are available. The check has to be run against the local UMC. Please keep in mind, that a user gets different list of available modules depending on the system he is trying to log in (e.g. DC master vs. DC slave).
Comment 1 Ammar Najjar univentionstaff 2014-06-10 09:51:43 CEST
A new script is added to resolve this bug with the name:
19_vailable_uc_modules

In the case of 'Domänenadministrator' the minimum limit of existing modules are checked, not exclusively a certain list of modules.
The case when a user is teacher+staff is not considered in this script.

A holdback of this scipt is that the lists that contains the modules (id, flavor) are hard coded.
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2014-12-01 10:46:10 CET
> # staff is not able to login to dc-slave
> if (userType != 'staff' and serverRole != 'domaincontroller_slave'):

I think "and" is not correct here (should be "or").
Comment 3 Florian Best univentionstaff 2014-12-01 10:54:58 CET
typo (if not already adjsuted): 19_vailable_uc_modules → 10_available_umc_modules
Comment 4 Ammar Najjar univentionstaff 2014-12-01 11:40:01 CET
(In reply to Florian Best from comment #3)
> typo (if not already adjsuted): 19_vailable_uc_modules →
> 10_available_umc_modules

typo is only in the comment 1 and as one can't edit a comment, I left it there for it is correct in the actual script name and no harm done.
Comment 5 Ammar Najjar univentionstaff 2014-12-01 11:42:50 CET
(In reply to Sönke Schwardt-Krummrich from comment #2)
> > # staff is not able to login to dc-slave
> > if (userType != 'staff' and serverRole != 'domaincontroller_slave'):
> 
> I think "and" is not correct here (should be "or").

Correct.
Modified.
Comment 6 Ammar Najjar univentionstaff 2015-02-12 11:06:58 CET
After Bug #36537, the list of modules are changed.
script modified accordingly ( for 4.0 only )
The related documentation should be updated, see bug #37786.
Comment 7 Florian Best univentionstaff 2015-05-04 17:17:46 CEST
Please integrate the new flavor of UCS@school 4.0R2 ('schoolgroups', 'teacher').
Comment 8 Ammar Najjar univentionstaff 2015-05-05 11:42:21 CEST
(In reply to Florian Best from comment #7)
> Please integrate the new flavor of UCS@school 4.0R2 ('schoolgroups',
> 'teacher').

Done.
Comment 9 Florian Best univentionstaff 2015-05-06 12:23:32 CEST
OK