http://jira.hyperic.com/browse/HHQ-2051
To reproduce:
Add a platform as hqadmin
Add the platform in a group
Create a role with all but user/role create/edit/delete access
Add a user to this role
Add above group under this role
Try to delete the platform after logging in as the user created above
Delete fails with an error that looks like below (more details in support ticket)
2008-05-05 11:13:11,184 ERROR [http-0.0.0.0-7080-2] [org.hyperic.hq.bizapp.server.session.AppdefBossEJBImpl] Caught PermissionException while removing platform: 11212
org.hyperic.hq.authz.shared.PermissionException: Subject: 10405 does not have operation: 308 on resource type: 303 instance: 11323
at com.hyperic.hq.authz.shared.PermissionManagerImpl.check(PermissionManagerImpl.java:223)
at org.hyperic.hq.appdef.server.session.AppdefSessionEJB.checkPermission(AppdefSessionEJB.java:300)
at org.hyperic.hq.appdef.server.session.AppdefSessionEJB.checkPermission(AppdefSessionEJB.java:321)
at org.hyperic.hq.appdef.server.session.AppdefSessionEJB.checkRemovePermission(AppdefSessionEJB.java:476)
at org.hyperic.hq.appdef.server.session.ServerManagerEJBImpl.removeServer(ServerManagerEJBImpl.java:293)
Anonymous