<div dir="ltr">Sorry, there was an another one: UserProfileEditor on (System) which someone mistakenly granted probably, but removing it makes no difference, user still sees the Expanded tab. There are no groups in this system. In short, these permissions are inherited from Everyone:<div><br></div><div>UserTemplateBasedVm</div><div>CpuProfileOperator</div><div>VnicProfileUser</div><div><br></div><div>And these are granted explicitly on objects:</div><div><br></div><div>UserRole (on a VM Pool)</div><div>UserRole (on a VM of the VM Pool)</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-03-19 7:22 GMT+00:00 Oved Ourfali <span dir="ltr"><<a href="mailto:oourfali@redhat.com" target="_blank">oourfali@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">As far as I remember you're right. <br>
Are you sure these are the only permissions? Maybe something inherited from a group? <br>
I can check the code next week to make sure nothing has changed. </p>
<div class="gmail_quote"><div><div class="h5">On Mar 18, 2016 23:10, "James Michels" <<a href="mailto:karma.sometimes.hurts@gmail.com" target="_blank">karma.sometimes.hurts@gmail.com</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr"><div>Hi,</div><div><br>This is oVirt 3.6.3.4, and I have a user with the following permissions.</div><div><br></div><div>Role | Object | Inherited permission</div><div>UserTemplateBasedVm | Small (VM Template) | Everyone</div><div>UserTemplateBasedVm | Medium (VM Template) | Everyone</div><div>UserTemplateBasedVm | Large (VM Template) | Everyone</div><div>UserTemplateBasedVm | XLarge (VM Template) | Everyone</div><div>UserTemplateBasedVm | ubuntu-14 (VM Template) | Everyone</div><div>UserTemplateBasedVm | centos-7 (VM Template) | Everyone</div><div>CpuProfileOperator | Default (CpuProfile) | Everyone</div><div>VnicProfileUser | LAN1 (Vnic Profile) | Everyone</div><div>VnicProfileUser | LAN2 (Vnic Profile) | Everyone</div><div>UserRole | instance (VM Pool) | </div><div>UserRole | instance-6 (VM) |</div><div><br></div><div>This user can see the Extended tab when logged in to the User panel. However AFAIK only PowerUserRole grants access to that tab. Which permission(s) is allowing the user to see the tab?</div><div><br></div><div>Thanks</div><div><br></div><div>James</div></div>
<br></div></div>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
<br></blockquote></div>
</blockquote></div><br></div>