<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 27, 2017 at 12:26 PM, Tomas Jelinek <span dir="ltr"><<a href="mailto:tjelinek@redhat.com" target="_blank">tjelinek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 27, 2017 at 12:08 PM, Jerome R <span dir="ltr"><<a href="mailto:jerzkie102030@gmail.com" target="_blank">jerzkie102030@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div>I tried this workaround, I tried to logon the user acct to moVirt with 1 of the admin permission resources, it works I can access to the VM assigned however I'm able to see what Admin can see in the portal though not able to perform action. So far that's one of my concern the user should be able to see just his/her VM assigned.<br></div></div></div></blockquote><div><br></div><div>yes, this is a consequence of using the admin API - you can see all the entities and do actions only on the ones you have explicit rights to.<br><br></div><div>Unfortunately, until the <a href="https://github.com/oVirt/moVirt/issues/282" target="_blank">https://github.com/oVirt/<wbr>moVirt/issues/282</a> is done, there is nothing better I can offer you.<br><br></div><div>We can try to give that item a priority, just need to get the current RC out of the door (hopefully soon). <br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><br></div>Thanks,<br></div>Jerome<br></div><div><div class="gmail-h5"><div class="gmail-m_205218561618567069gmail-HOEnZb"><div class="gmail-m_205218561618567069gmail-h5"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 27, 2017 at 3:20 PM, Tomas Jelinek <span dir="ltr"><<a href="mailto:tjelinek@redhat.com" target="_blank">tjelinek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span>On Tue, Jun 27, 2017 at 10:13 AM, Jerome Roque <span dir="ltr"><<a href="mailto:jerzkie102030@gmail.com" target="_blank">jerzkie102030@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><div><div>Hi Tomas,<br><br></div>Thanks for your response. What do you mean by "removing the support for user permissions"? I'm using </div></div></div></div></blockquote><div><br></div></span><div>The oVirt permission model expects to be told explicitly by one header if the logged in user has some admin permissions or not. In the past the API behaved differently in this two cases so we needed to remove the option to use it without admin permissions.<br><br></div><div>Now the situation is better so we may be able to bring this support back, but it will require some testing.<br></div></div></div></div></blockquote></div></div></div></div></div></div></blockquote></div></div></div></blockquote><div><br></div><div><div>I created an experimental apk here <a href="https://github.com/suomiy/moVirt/raw/user-roles/moVirt/moVirt-release.apk">https://github.com/suomiy/moVirt/raw/user-roles/moVirt/moVirt-release.apk</a> </div><div>It has some limitations for user roles, so entity events and event search query are disabled. Also the apk has not been tested thoroughly. </div></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-h5"><div class="gmail-m_205218561618567069gmail-HOEnZb"><div class="gmail-m_205218561618567069gmail-h5"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div></div><span><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><div>the latest version of moVirt 1.7.1, and ovirt-engine 4.1.<br></div>Is there anyone tried running user role in moVirt?<br></div></div></div></blockquote></span></div></div></div></blockquote></div></div></div></div></div></div></blockquote></div></div></div></blockquote><div><br></div><div>Please let us know if this works for you or if you encounter any bugs.</div><div><br></div><div>Regards </div><div>Filip</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-h5"><div class="gmail-m_205218561618567069gmail-HOEnZb"><div class="gmail-m_205218561618567069gmail-h5"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div></div></div></div></blockquote><div><br></div></span><div>you will get permission denied from the API if you try to log in with a user which has no admin permission. If you give him any admin permission on any resource, it might work as a workaround.<br></div><span><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><br></div>Best Regards,<br></div>Jerome<br></div><div class="gmail-m_205218561618567069gmail-m_-5955079608274319633m_481392005421653176HOEnZb"><div class="gmail-m_205218561618567069gmail-m_-5955079608274319633m_481392005421653176h5"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 20, 2017 at 5:14 PM, Tomas Jelinek <span dir="ltr"><<a href="mailto:tjelinek@redhat.com" target="_blank">tjelinek@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote"><span>On Fri, Jun 16, 2017 at 6:14 AM, Jerome Roque <span dir="ltr"><<a href="mailto:jerzkie102030@gmail.com" target="_blank">jerzkie102030@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div>Good day oVirt Users,<br><br>I need some little help. I have a KVM and used oVirt for the management
of VMs. What I want is that my client will log on to their account and
access their virtual machine using their Smart phone. I tried to install
mOvirt and yes can connect to the console of my machine, but it is only
accessible for admin console. </div></div></div></blockquote><div><br></div></span><div>moVirt originally worked both with admin and user permissions. We had to remove the support for user permissions since the oVirt API did not provide all features moVirt needed for user permissions (search for example). But the API moved significantly since then (the search works also for users now for one) so we can move it back. I have opened an issue about it: <a href="https://github.com/oVirt/moVirt/issues/282" target="_blank">https://github.com/oVirt/moVir<wbr>t/issues/282</a> - we can try to do it in next version.<br></div><span><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div>Tried to use web console, it downloaded
console.vv but can't open it. By any chance could make this thing
possible?<br></div></div></div></blockquote><div><br></div></span><div>If you want to use a web console for users, I would suggest to try the new ovirt-web-ui [1] - you have a link to it from oVirt landing page and since 4.1 it is installed by default with oVirt.<br><br></div><div>The .vv file can not be opened using aSPICE AFAIK - adding Iordan as the author of aSPICE to comment on this.<br></div><div><br>[1]: <a href="https://github.com/oVirt/ovirt-web-ui" target="_blank">https://github.com/oVirt/ovirt<wbr>-web-ui</a><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><div><br></div>Thank you,<br></div>Jerome<br></div>
<br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman<wbr>/listinfo/users</a><br>
<br></blockquote></div><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></span></div><br></div></div>
</blockquote></div><br></div>
</div></div></div></div></blockquote></div><br></div></div>
<br>______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
<br></blockquote></div><br></div></div>