Re: [ovirt-devel] Permission issues when trying to migrate vm through the api (ovirt system tests)

Hi everyone! I'm having some issues when trying to run the ovirt system tests from ovirt master branch, and I need some help from you guys.

The issue is that when trying to migrate a vm through the api, I get the error: RequestError: status: 400 reason: Bad Request detail: User is not authorized to perform this action. That does not happen when doing the same through the ui, the vm is migrated correctly. The engine logs don't add much more details: 2016-04-18 06:04:15,393 INFO [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) [29237280] No permission found for user '0000001a-001a-001a-001a-0000000002dd' or one of the groups he is member of, when running action 'MigrateVmToServer', Required permissions are: Action type: 'USER' Action group: 'CREATE_VM' Object type: 'Cluster' Object ID: 'null'. 2016-04-18 06:04:15,393 WARN [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) [29237280] Validation of action 'MigrateVmToServer' failed for user admin@internal-authz. Reasons: VAR__ACTION__MIGRATE,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2016-04-18 06:04:15,413 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-15) [] Operation Failed: [User is not authorized to perform this action.] Something that looks odd to me too, is that in the roles, when you edit the 'SuperUser' role (the one the admin user belongs to) there there's one permission missing, the 'VM->Provisioning Operations->Create Instance', and can't be added (it's greyed out), not sure if it's related though, I can pass you a screenshot if you want. I can give you access to an environment where that happens and more details/logs/etc if you want to look deeper into it. Thanks! -- David Caro Red Hat S.L. Continuous Integration Engineer - EMEA ENG Virtualization R&D Tel.: +420 532 294 605 Email: dcaro(a)redhat.com IRC: dcaro|dcaroest@{freenode|oftc|redhat} Web: www.redhat.com RHT Global #: 82-62605