#1638 [ipa webui] Checking/Unchecking "Hide already enrolled" doesn't change list;
Closed: Fixed None Opened 12 years ago by dpal.

https://bugzilla.redhat.com/show_bug.cgi?id=729665

Description of problem:
In HBAC Rules - all users/user groups/hosts/host groups are listed on the available side - even after some of these objects have been enrolled previously.

The enrolled objects are not listed on the Prospective side. How can they be unenrolled?

Checking/Unchecking "Hide already enrolled" doesn't change list on either side.

Seeing the same behaviour in User groups, Host groups, Hosts...where "Hide already enrolled" checkbox is available.

Version-Release number of selected component (if applicable):
ipa-server-2.0.99-6.20110802T0644zgit6f6679e.el6.x86_64

How reproducible:
always


Steps to Reproduce:
1. add 3 users
2. Go to - Policy - HBAC Rules
2. Add a rule, edit it
3. In "Who" section, click on Add for users
4. Select a user, and enroll
5. Click on Add again (The user enrolled is not listed on Prospective side)
6. Uncheck/Check "Hide already enrolled" (the list on Available or Prospective list doesn't change)
7. Without a user listed on Prospective side, cannot choose a user to unenroll
8. Can click to enroll same user from Available list multiple times....and no message indicates that this user is already enrolled

9. Same behaviour when adding user groups, adding host categories. adding service categories. 
10. Same behaviour - when enrolling members in usergroups, hostgroups

Actual results:
The user enrolled is not listed on Prospective side
Unchecking/Checking "Hide already enrolled" doesn't change the list on Available or Prospective list

Expected results:
The user enrolled should be listed on Prospective side
Unchecking/Checking "Hide already enrolled" should change the list on Available list
List enrolled users in Prospective list...to allow choosing a user from this list, and clicking << to unenroll

Additional info:
bug 726751 refers to this behaviour in its details, but mainly addresses a separate error.

In the current design, the enrollment dialog is only used for enrolling new entries. Note that this dialog box only has Enroll and Cancel buttons, not Save or Update. Unenrollment is done separately using the Delete button that usually accompanies the Enroll/Add link.

The 'Hide already enrolled' is used to hide entries that are already enrolled from the Available list. The Prospective list is not affected by this checkbox.

If this is a usability issue we might want to get UXD input.

Currently entries that are already enrolled seem to be able to be re-enrolled without any problem. The operation actually fails, but it's not reported due to issue #1628.

The other issue related to the 'Hide already enrolled' has already been fixed in #1548.

The 'Hide already enrolled' checkbox is checked by default, so this checkbox is actually used to show users that are already enrolled in the Available list. These users should never be added into the Prospective list because the enrollment will fail anyway. Based on discussion with Adam, we might want to remove the checkbox and never show the enrolled users at all.

- master: 6bf90a472b408ef46fbfc0d8d72fa6bd8f982e61
- ipa-2-1: 1603eb03f3196b2114813c85514832b3612a9bf6

Metadata Update from @dpal:
- Issue assigned to edewata
- Issue set to the milestone: FreeIPA 2.1.1 (bug fixing)

7 years ago

Login to comment on this ticket.

Metadata