<div dir="ltr"><pre><h4 class="gmail-result-expand-nav" style="box-sizing:border-box;margin:0px 0px 8px;padding:0px;font-size:15px;color:rgb(46,48,51);font-family:Arial,"Microsoft YaHei",微软雅黑,宋体,"Malgun Gothic",Meiryo,sans-serif;font-variant-numeric:normal;font-variant-east-asian:normal;line-height:15px;white-space:normal;background-color:rgb(249,251,252)"><a style="box-sizing:border-box;outline:0px;color:rgb(46,48,51)">according to the description of this article: </a><a class="gmail-moz-txt-link-freetext" href="https://gerrit.ovirt.org/#/c/74173/" style="background-color:rgb(255,255,255);font-family:arial,sans-serif;font-size:small;font-weight:normal">https://gerrit.ovirt.org/#/c/74173/</a></h4></pre><pre>Changed the value of property 'ENGINE_API_FILTER_BY_DEFAULT' to false,but it still did not work.BTW. My Ovirt is 4.2.0.2-1</pre><pre><br></pre><pre>thanks.</pre></div><div class="gmail_extra"><br><div class="gmail_quote">2018-01-11 10:57 GMT+08:00 Zhong Qiang <span dir="ltr"><<a href="mailto:xiaoqiang3243@gmail.com" target="_blank">xiaoqiang3243@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div> I tried to give a user the permissions for vms. when this user log in vm portal ,get messages "No VM available."</div><div> this user was granted follow roles: </div><div> UserVmManager</div><div> UserRole</div><div> </div><div> engine logs:</div><div> 2018-01-10 20:32:33,938-05 INFO [org.ovirt.engine.core.bll.<wbr>AddPermissionCommand] (EE-ManagedThreadFactory-<wbr>engine-Thread-7438) [9b5a405a-c956-4d69-b286-<wbr>f6b22cbf3c12] Running command: AddPermissionCommand internal: false. Entities affected : ID: 1cf75959-7992-43fe-a1f7-<wbr>ed6c0c48fd35 Type: VMAction group MANIPULATE_PERMISSIONS with role type USER, ID: 1cf75959-7992-43fe-a1f7-<wbr>ed6c0c48fd35 Type: VMAction group</div><div> ADD_USERS_AND_GROUPS_FROM_<wbr>DIRECTORY with role type USER</div><div>2018-01-10 20:32:33,944-05 INFO [org.ovirt.engine.core.bll.<wbr>aaa.AddUserCommand] (EE-ManagedThreadFactory-<wbr>engine-Thread-7438) [787deac0] Running command: AddUserCommand internal: true. Entities affected :</div><div>ID: aaa00000-0000-0000-0000-<wbr>123456789aaa Type: SystemAction group MANIPULATE_USERS with role type ADMIN</div><div>2018-01-10 20:32:33,981-05 INFO [org.ovirt.engine.core.dal.<wbr>dbbroker.auditloghandling.<wbr>AuditLogDirector] (EE-ManagedThreadFactory-<wbr>engine-Thread-7438) [787deac0] EVENT_ID: USER_ADD(149), User '<a href="mailto:zhongq@ctcnet.com" target="_blank">zhongq@ctcnet.com</a>' was added successfully to the system.</div><div>2018-01-10 20:32:34,036-05 INFO [org.ovirt.engine.core.dal.<wbr>dbbroker.auditloghandling.<wbr>AuditLogDirector] (EE-ManagedThreadFactory-<wbr>engine-Thread-7438) [787deac0] EVENT_ID: USER_ADD_PERMISSION(850), User/Group <a href="mailto:zhongq@ctcnet.com" target="_blank">zhongq@ctcnet.com</a>, Namespace DC=ctcnet,DC=com, Authorization provider: ctcnet.com-authz was granted permission for Role UserRole on VM ubuntu16.04-64, by admin@internal-authz.</div><div><br></div><div><br></div><div>2018-01-10 20:38:06,263-05 INFO [org.ovirt.engine.core.sso.<wbr>utils.AuthenticationUtils] (default task-4) [] User <a href="mailto:zhongq@ctcnet.com" target="_blank">zhongq@ctcnet.com</a> successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-<wbr>priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-<wbr>search ovirt-ext=token-info:public-<wbr>authz-search ovirt-ext=token-info:validate ovirt-ext=token:passwor</div><div>d-access</div><div>2018-01-10 20:38:06,301-05 INFO [org.ovirt.engine.core.bll.<wbr>aaa.CreateUserSessionCommand] (default task-5) [2a6c3d14] Running command: CreateUserSessionCommand internal: false.</div><div>2018-01-10 20:38:06,338-05 INFO [org.ovirt.engine.core.dal.<wbr>dbbroker.auditloghandling.<wbr>AuditLogDirector] (default task-5) [2a6c3d14] EVENT_ID: USER_VDC_LOGIN(30), User zhongq@ctcnet.com@ctcnet.com-<wbr>authz connecting from '10.10.19.228' using session 'z0/9HgB4mjzfDnIN4P/<wbr>fe4A3fzwWIWWcR9xKDvsI/<wbr>XXgHZApjRp1BCufgtSK6n3kvA/<wbr>ScdP4qqGqiX01lyJHSQ==' logged in.</div><div>2018-01-10 20:38:06,956-05 ERROR [org.ovirt.engine.core.bll.<wbr>GetSystemStatisticsQuery] (default task-14) [06c80cc6-ad15-4d82-a907-<wbr>21ab9a5c1cc4] Query execution failed due to insufficient permissions.</div><div>2018-01-10 20:38:07,044-05 ERROR [org.ovirt.engine.core.bll.<wbr>GetPermissionsForObjectQuery] (default task-20) [1b7a6564-534d-4df5-a2b7-<wbr>52da214b95cd] Query execution failed due to insufficient permissions.</div><div>2018-01-10 20:38:07,045-05 ERROR [org.ovirt.engine.api.restapi.<wbr>resource.<wbr>AbstractBackendResource] (default task-20) [] Operation Failed: query execution failed due to insufficient permissions.</div></div>
</blockquote></div><br></div>