Re: [Engine-devel] Design review summary for 3.2 - adding support for External Events
----- Original Message -----
From: "Christopher Morrissey"
<Christopher.Morrissey(a)netapp.com>
To: "Eli Mesika" <emesika(a)redhat.com>, "engine-devel"
<engine-devel(a)ovirt.org>
Sent: Monday, November 19, 2012 4:50:34 PM
Subject: RE: [Engine-devel] Design review summary for 3.2 - adding support for External
Events
Hi Eli,
I've perused the design and it looks very good for the purpose of
adding events to the log as back end tasks on the NetApp VSC are
started and complete.
I do have one question. As part of the new UI plugin framework that
Vojtech is working on he added the capability to retrieve a session
ID that will be used outside of the oVirt engine to invoke REST API
calls. I'm assuming this session would have the same role as the
user that is currently logged in.
According to the event log design, only the Super user will have
permissions to add events by default. This would mean that if anyone
other than the super user is logged in and performing any tasks
through the NetApp plugin, the server side of the VSC will likely
not be able to log events. This could be confusing for users as
sometimes they see events showing up giving them information on the
task progress and sometimes they don't depending on the role logged
in.
Would it make sense to allow all roles to log events by default? I'm
not sure what security problems would arise given that it is just a
log and they would be tagged as external events.
Hi Christopher, our security model implies a black-list, so, I don;t think this is
possible
But still, a super-user can of course give the permission to add new events to all Roles
in the system and you will have the same result.
Does that make sense ?
-Chris
-----Original Message-----
From: engine-devel-bounces(a)ovirt.org
[mailto:engine-devel-bounces@ovirt.org] On Behalf Of Eli Mesika
Sent: Monday, November 19, 2012 7:24 AM
To: engine-devel
Subject: [Engine-devel] Design review summary for 3.2 - adding
support for External Events
Discussion : http://wiki.ovirt.org/wiki/Talk:ExternalEvents
Updated Design :
http://wiki.ovirt.org/wiki/Features/Design/DetailedExternalEvents#Future_...
_______________________________________________
Engine-devel mailing list
Engine-devel(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-devel