[ovirt-users] Access VM Console on a Smart Phone with User Permission

[Jerome R]

Hello everyone! I haven't tried your uploaded app yet. I just want to ask
regarding this experimental, with just user role only it can logon to
moVirt and see its VM? no admin role to be applied?
Thanks!

Best Regards,

On Tue, Jul 4, 2017 at 5:39 PM, Filip Krepinsky <fkrepins at redhat.com> wrote:

>
>
> On Tue, Jun 27, 2017 at 12:26 PM, Tomas Jelinek <tjelinek at redhat.com>
> wrote:
>
>>
>>
>> On Tue, Jun 27, 2017 at 12:08 PM, Jerome R <jerzkie102030 at gmail.com>
>> wrote:
>>
>>> I tried this workaround, I tried to logon the user acct to moVirt with 1
>>> of the admin permission resources, it works I can access to the VM assigned
>>> however I'm able to see what Admin can see in the portal though not able to
>>> perform action. So far that's one of my concern the user should be able to
>>> see just his/her VM assigned.
>>>
>>
>> yes, this is a consequence of using the admin API - you can see all the
>> entities and do actions only on the ones you have explicit rights to.
>>
>> Unfortunately, until the https://github.com/oVirt/moVirt/issues/282 is
>> done, there is nothing better I can offer you.
>>
>> We can try to give that item a priority, just need to get the current RC
>> out of the door (hopefully soon).
>>
>>
>>>
>>> Thanks,
>>> Jerome
>>>
>>> On Tue, Jun 27, 2017 at 3:20 PM, Tomas Jelinek <tjelinek at redhat.com>
>>> wrote:
>>>
>>>>
>>>>
>>>> On Tue, Jun 27, 2017 at 10:13 AM, Jerome Roque <jerzkie102030 at gmail.com
>>>> > wrote:
>>>>
>>>>> Hi Tomas,
>>>>>
>>>>> Thanks for your response. What do you mean by "removing the support
>>>>> for user permissions"? I'm using
>>>>>
>>>>
>>>> The oVirt permission model expects to be told explicitly by one header
>>>> if the logged in user has some admin permissions or not. In the past the
>>>> API behaved differently in this two cases so we needed to remove the option
>>>> to use it without admin permissions.
>>>>
>>>> Now the situation is better so we may be able to bring this support
>>>> back, but it will require some testing.
>>>>
>>>
> I created an experimental apk here https://github.com/suomiy/
> moVirt/raw/user-roles/moVirt/moVirt-release.apk
> It has some limitations for user roles, so entity events and event search
> query are disabled. Also the apk has not been tested thoroughly.
>
>
>>
>>>>
>>>>> the latest version of moVirt 1.7.1, and ovirt-engine 4.1.
>>>>> Is there anyone tried running user role in moVirt?
>>>>>
>>>>
> Please let us know if this works for you or if you encounter any bugs.
>
> Regards
> Filip
>
>
>>>> you will get permission denied from the API if you try to log in with a
>>>> user which has no admin permission. If you give him any admin permission on
>>>> any resource, it might work as a workaround.
>>>>
>>>>
>>>>>
>>>>> Best Regards,
>>>>> Jerome
>>>>>
>>>>> On Tue, Jun 20, 2017 at 5:14 PM, Tomas Jelinek <tjelinek at redhat.com>
>>>>> wrote:
>>>>>
>>>>>>
>>>>>>
>>>>>> On Fri, Jun 16, 2017 at 6:14 AM, Jerome Roque <
>>>>>> jerzkie102030 at gmail.com> wrote:
>>>>>>
>>>>>>> Good day oVirt Users,
>>>>>>>
>>>>>>> I need some little help. I have a KVM and used oVirt for the
>>>>>>> management of VMs. What I want is that my client will log on to their
>>>>>>> account and access their virtual machine using their Smart phone. I tried
>>>>>>> to install mOvirt and yes can connect to the console of my machine, but it
>>>>>>> is only accessible for admin console.
>>>>>>>
>>>>>>
>>>>>> moVirt originally worked both with admin and user permissions. We had
>>>>>> to remove the support for user permissions since the oVirt API did not
>>>>>> provide all features moVirt needed for user permissions (search for
>>>>>> example). But the API moved significantly since then (the search works also
>>>>>> for users now for one) so we can move it back. I have opened an issue about
>>>>>> it: https://github.com/oVirt/moVirt/issues/282 - we can try to do it
>>>>>> in next version.
>>>>>>
>>>>>>
>>>>>>> Tried to use web console, it downloaded console.vv but can't open
>>>>>>> it. By any chance could make this thing possible?
>>>>>>>
>>>>>>
>>>>>> If you want to use a web console for users, I would suggest to try
>>>>>> the new ovirt-web-ui [1] - you have a link to it from oVirt landing page
>>>>>> and since 4.1 it is installed by default with oVirt.
>>>>>>
>>>>>> The .vv file can not be opened using aSPICE AFAIK - adding Iordan as
>>>>>> the author of aSPICE to comment on this.
>>>>>>
>>>>>> [1]: https://github.com/oVirt/ovirt-web-ui
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> Thank you,
>>>>>>> Jerome
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> Users mailing list
>>>>>>> Users at ovirt.org
>>>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20170706/0b0fb9c2/attachment.html>