Re: [ovirt-devel] Permission issues when trying to migrate vm through the api (ovirt system tests)

On 18 Apr 2016, at 12:47, Yaniv Kaul <ykaul(a)redhat.com&gt; wrote: On Mon, Apr 18, 2016 at 1:32 PM, David Caro <dcaro(a)redhat.com&gt; wrote: > > Hi everyone! > > > I'm having some issues when trying to run the ovirt system tests from > ovirt > master branch, and I need some help from you guys. > https://bugzilla.redhat.com/show_bug.cgi?id=1328011 great, lago caught a regression!

patch will be posted soon Y. > > The issue is that when trying to migrate a vm through the api, I get the > error: > > RequestError: > status: 400 > reason: Bad Request > detail: User is not authorized to perform this action. > > > That does not happen when doing the same through the ui, the vm is > migrated > correctly. > > The engine logs don't add much more details: > > 2016-04-18 06:04:15,393 INFO > [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) > [29237280] No permission found for user > '0000001a-001a-001a-001a-0000000002dd' or one of the groups he is member > of, when running action 'MigrateVmToServer', Required permissions are: > Action type: 'USER' Action group: 'CREATE_VM' Object type: 'Cluster' > Object ID: 'null'. > 2016-04-18 06:04:15,393 WARN > [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) > [29237280] Validation of action 'MigrateVmToServer' failed for user > admin@internal-authz. Reasons: > VAR__ACTION__MIGRATE,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION > 2016-04-18 06:04:15,413 ERROR > [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default > task-15) [] Operation Failed: [User is not authorized to perform this > action.] > > > Something that looks odd to me too, is that in the roles, when you edit > the > 'SuperUser' role (the one the admin user belongs to) there there's one > permission missing, the 'VM->Provisioning Operations->Create Instance', > and > can't be added (it's greyed out), not sure if it's related though, I can > pass > you a screenshot if you want. > > > I can give you access to an environment where that happens and more > details/logs/etc if you want to look deeper into it. > > > Thanks! > > > -- > David Caro > > Red Hat S.L. > Continuous Integration Engineer - EMEA ENG Virtualization R&D > > Tel.: +420 532 294 605 > Email: dcaro(a)redhat.com > IRC: dcaro|dcaroest@{freenode|oftc|redhat} > Web: www.redhat.com > RHT Global #: 82-62605 > _______________________________________________ Devel mailing list Devel(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/devel _______________________________________________ Devel mailing list Devel(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/devel