<div dir="ltr">I've created one <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1284472">https://bugzilla.redhat.com/show_bug.cgi?id=1284472</a></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 23, 2015 at 11:14 AM, Eli Mesika <span dir="ltr"><<a href="mailto:emesika@redhat.com" target="_blank">emesika@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
----- Original Message -----<br>
> From: "Maksim Naumov" <<a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a>><br>
> To: "users" <<a href="mailto:users@ovirt.org">users@ovirt.org</a>><br>
> Sent: Monday, November 23, 2015 11:18:09 AM<br>
> Subject: Re: [ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES<br>
><br>
> CPU pinning topology is also not used in this template. And even there is no<br>
> settings in the user interface to change it.<br>
><br>
> So, currently no one user is able to create new VM.<br>
<br>
</span>Seems to me as a bug<br>
Can you please open a bug, attach all relevant logs and also fully describe the template that you attempt to use to create the VM?<br>
<div><div class="h5"><br>
><br>
> On Mon, Nov 23, 2015 at 8:54 AM, Maksim Naumov < <a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a><br>
> > wrote:<br>
><br>
><br>
><br>
> As I was able to understand this error mean that user tried to rewrite the<br>
> destination host of VM. But the problem is that there is no setting like<br>
> this in the user interface. User can't change the destination 100%. It is<br>
> not hardcoded in the template settings because he was trying to run Base<br>
> template (which is not attached to any host).<br>
><br>
> On Mon, Nov 23, 2015 at 8:36 AM, Maksim Naumov < <a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a><br>
> > wrote:<br>
><br>
><br>
><br>
> Hello<br>
><br>
> I faced with the problem. The user can;t create a VM. The user has<br>
> PowerUserRole on Cluster. He tried to create a VM with a base template and<br>
> had no success.<br>
><br>
> Here some lines from log. Have no idea why it wants for<br>
> EDIT_ADMIN_VM_PROPERTIES permission for user?<br>
><br>
> 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]<br>
> (default task-160) [2f0eb905] Checking whether user<br>
> 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member of,<br>
> have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615<br>
> Type: VdsGroupsAction group CREATE_VM with role type USER, ID:<br>
> 00000000-0000-0000-0000-000000000000 Type: VmTemplateAction group CREATE_VM<br>
> with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type:<br>
> VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN<br>
> 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]<br>
> (default task-160) [2f0eb905] Found permission<br>
> '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on<br>
> 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'<br>
> 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]<br>
> (default task-160) [2f0eb905] Found permission<br>
> '00000004-0004-0004-0004-000000000355' for user when running 'AddVm', on<br>
> 'Template' with id '00000000-0000-0000-0000-000000000000'<br>
> 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]<br>
> (default task-160) [2f0eb905] No permission found for user when running<br>
> action 'AddVm', on object 'Cluster' for action group<br>
> 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'.<br>
> 2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand]<br>
> (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user<br>
</div></div>> vincent.engel@hitmeister.de@ <a href="http://hitmeister.de" rel="noreferrer" target="_blank">hitmeister.de</a> . Reasons:<br>
<div><div class="h5">> VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION<br>
><br>
> --<br>
> Maksim Naumov<br>
> Hitmeister GmbH<br>
> Softwareentwickler<br>
><br>
> Habsburgerring 2<br>
> 50674 Köln<br>
><br>
> E: <a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a><br>
> <a href="http://www.hitmeister.de" rel="noreferrer" target="_blank">www.hitmeister.de</a><br>
><br>
> HRB 59046, Amtsgericht Köln<br>
> Geschäftsführer: Dr. Gerald Schönbucher<br>
><br>
><br>
><br>
> --<br>
> Maksim Naumov<br>
> Hitmeister GmbH<br>
> Softwareentwickler<br>
><br>
> Habsburgerring 2<br>
> 50674 Köln<br>
><br>
> E: <a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a><br>
> <a href="http://www.hitmeister.de" rel="noreferrer" target="_blank">www.hitmeister.de</a><br>
><br>
> HRB 59046, Amtsgericht Köln<br>
> Geschäftsführer: Dr. Gerald Schönbucher<br>
><br>
><br>
><br>
> --<br>
> Maksim Naumov<br>
> Hitmeister GmbH<br>
> Softwareentwickler<br>
><br>
> Habsburgerring 2<br>
> 50674 Köln<br>
><br>
> E: <a href="mailto:maksim.naumov@hitmeister.de">maksim.naumov@hitmeister.de</a><br>
> <a href="http://www.hitmeister.de" rel="noreferrer" target="_blank">www.hitmeister.de</a><br>
><br>
> HRB 59046, Amtsgericht Köln<br>
> Geschäftsführer: Dr. Gerald Schönbucher<br>
><br>
</div></div>> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
> <a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr">Maksim Naumov<div>Hitmeister GmbH </div><div>Softwareentwickler</div><div><br></div><div>Habsburgerring 2</div><div>50674 Köln</div><div><br></div><div>E: <a href="mailto:maksim.naumov@hitmeister.de" target="_blank">maksim.naumov@hitmeister.de</a></div><div><a href="http://www.hitmeister.de" target="_blank">www.hitmeister.de</a> </div><div><br></div><div>HRB 59046, Amtsgericht Köln</div><div>Geschäftsführer: Dr. Gerald Schönbucher<br></div></div></div></div></div>
</div>