freeipa

#7204 [RFE] Do not display user list in FreeIPA WebUI self-service
Closed: wontfix by rcritten. Opened by pvoborni.

Closed: wontfix
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1494870

Description of problem:
When accessing FreeIPA server web ui from any IPA user with lowest privileges
in system it is visible two tabs, Users, OTP Tokens. If user clicks OTP Tokens
tab and back to Users tab all users in enterprise are being listed to the
unauthorized user.
Version-Release number of selected component (if applicable):
ipa-server-4.5.0-21.0.1.el7_4.1.2.x86_64
Steps to Reproduce:
1. Login to FreeIPA WebUI with any user with minimal privileges.
2. Click to OTP Tokens tab.
3. Click back to Users tab.
Actual results:
All users registered in FreeIPA server are visible.
Expected results:
I expect to see userlist only if the user is authorized to do it.

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1494870

Metadata Update from @pvoborni:
- Issue priority set to: minor

Metadata Update from @stsymbal:
- Issue tagged with: rfe, webui

Closing as wontfix, this is working as designed.

The users are POSIX users after all so visible anyway.

Metadata Update from @rcritten:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)
Metadata
None

rfe webui

None
None
Highest
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.