3:32 a.m.
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
3:35 a.m.
Hi
You didn't really specify what you would like to accomplish, and what permissions were
granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin portal.
So, as long as you don't assign the user with admin role he will not be able to login
to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks through the user
portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
To: users(a)ovirt.org
Sent: Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3:43 a.m.
This is a multi-part message in MIME format.
--------------030105050901000004050907
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Hi,
Sorry let be a bit more clear. I want to have a user that can log into
the user portal and create vm's, stop them, add disks etc. But only as a
user.
I tried the superuser role and can do all things _except _creating a new
VM. I also want the user to only see and manipulate his own VM's and
not the other ones running on the same system.
Even with the PowerUser role, I am not able to create a new VM as this
user. Also when I edit the built-in PowerUser role, I only see the
following rights selected:
Login Permissions
Template
Provisioning Operations
Create
VM
Provisioning Operations
Edit properties
Create
Disk
Provisioning Operations
Create
Everything else is deselected.
Kind regards,
Jorick Astrego
Netbulae
On 07/22/2014 10:35 AM, Oved Ourfali wrote:
Hi
You didn't really specify what you would like to accomplish, and what permissions
were granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin portal.
So, as long as you don't assign the user with admin role he will not be able to login
to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks through the
user portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
> To: users(a)ovirt.org
> Sent: Tuesday, July 22, 2014 11:32:16 AM
> Subject: [ovirt-users] user permissions
>
> Hi,
>
> In our 3.4.3 environment I started adding external users (it is
> connected to a freeipa server) and I'm having some problems setting the
> correct permissions.
>
> When I give all user roles to a user, I cannot create a vm and get an
> error "User is not authorized to perform this action". I tried setting
> it on the system level, DC level and cluster level.
>
> I needed to give this user an administrator role with only exactly the
> same vm and disk permissions (nothing extra) and things work ok, but he
> can now login to the admin portal. So I blocked it with a .htaccess
> which is not the prettiest solution.
>
> Am I doing things wrong?
>
> Also the user disappeared from the "System permissions" overview but can
> still login, which is a bit weird.
>
> Kind regards,
>
> Jorick Astrego
> Netbulae
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
--------------030105050901000004050907
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta content="text/html; charset=UTF-8"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi, <br>
<br>
Sorry let be a bit more clear. I want to have a user that can log
into the user portal and create vm's, stop them, add disks etc. But
only as a user.<br>
<br>
I tried the superuser role and can do all things <u>except </u>creating
a new VM. I also want the user to only see and manipulate his own
VM's and not the other ones running on the same system.<br>
<br>
Even with the PowerUser role, I am not able to create a new VM as
this user. Also when I edit the built-in PowerUser role, I only see
the following rights selected:<br>
<br>
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root0_node0_node2" tabindex="-1"
checked="checked" disabled="disabled"
type="checkbox"></span><span>Login
Permissions<br>
<br>
</span>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root2" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Template</span></div>
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root2_node1" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Provisioning
Operations</span></div>
</div>
</div>
<div aria-level="3" aria-posinset="1"
aria-setsize="3"
role="treeitem" aria-selected="true">
<div style="padding-left: 32px;" class="GPDB324CAIB
GPDB324CGIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root2_node1_node0"
tabindex="-1" checked="checked"
disabled="disabled"
type="checkbox"></span><span>Create</span></div>
</div>
</div>
</div>
<br>
</div>
<span>VM</span>
<div aria-level="2" aria-expanded="false"
aria-posinset="1"
aria-setsize="3" role="treeitem"
aria-selected="false">
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
</div>
</div>
</div>
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root3_node1" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Provisioning
Operations</span></div>
</div>
</div>
<div aria-level="3" aria-posinset="1"
aria-setsize="5"
role="treeitem" aria-selected="false">
<div style="padding-left: 32px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root3_node1_node0"
tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Edit
properties</span></div>
</div>
</div>
</div>
<div aria-level="3" aria-posinset="2"
aria-setsize="5"
role="treeitem" aria-selected="true">
<div style="padding-left: 32px;" class="GPDB324CAIB
GPDB324CGIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div tabindex="0"
class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root3_node1_node1"
tabindex="-1"
checked="checked" disabled="disabled"
type="checkbox"></span><span>Create</span></div>
</div>
</div>
</div>
<br>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root5" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Disk</span></div>
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root5_node0" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Provisioning
Operations</span></div>
</div>
</div>
<div aria-level="3" aria-posinset="1"
aria-setsize="6"
role="treeitem" aria-selected="true">
<div style="padding-left: 32px;" class="GPDB324CAIB
GPDB324CGIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root5_node0_node0"
tabindex="-1"
checked="checked" disabled="disabled"
type="checkbox"></span><span>Create</span></div>
</div>
</div>
</div>
<br>
Everything else is deselected.<br>
<br>
Kind regards,<br>
<br>
Jorick Astrego<br>
Netbulae<br>
<br>
<div class="moz-cite-prefix">On 07/22/2014 10:35 AM, Oved Ourfali
wrote:<br>
</div>
<blockquote
cite="mid:1074377558.11486624.1406018123359.JavaMail.zimbra@redhat.com"
type="cite">
<pre wrap="">Hi
You didn't really specify what you would like to accomplish, and what permissions were
granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin portal.
So, as long as you don't assign the user with admin role he will not be able to login
to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks through the user
portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "Jorick Astrego" <a
class="moz-txt-link-rfc2396E"
href="mailto:j.astrego@netbulae.eu"><j.astrego@netbulae.eu></a>
To: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated"
href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a class="moz-txt-link-freetext"
href="http://lists.ovirt.org/mailman/listinfo/users">http://...
</pre>
</blockquote>
</blockquote>
<br>
</body>
</html>
--------------030105050901000004050907--
3:43 a.m.
This is a multi-part message in MIME format.
--------------020802020500080801040002
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Hi,
Sorry let be a bit more clear. I want to have a user that can log into
the user portal and create vm's, stop them, add disks etc. But only as a
user.
I tried the poweruser role and can do all things _except _creating a new
VM. I also want the user to only see and manipulate his own VM's and
not the other ones running on the same system.
Even with the PowerUser role, I am not able to create a new VM as this
user. Also when I edit the built-in PowerUser role, I only see the
following rights selected:
Login Permissions
Template
Provisioning Operations
Create
VM
Provisioning Operations
Edit properties
Create
Disk
Provisioning Operations
Create
Everything else is deselected.
Kind regards,
Jorick Astrego
Netbulae
On 07/22/2014 10:35 AM, Oved Ourfali wrote:
Hi
You didn't really specify what you would like to accomplish, and what permissions
were granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin portal.
So, as long as you don't assign the user with admin role he will not be able to login
to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks through the
user portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
> To: users(a)ovirt.org
> Sent: Tuesday, July 22, 2014 11:32:16 AM
> Subject: [ovirt-users] user permissions
>
> Hi,
>
> In our 3.4.3 environment I started adding external users (it is
> connected to a freeipa server) and I'm having some problems setting the
> correct permissions.
>
> When I give all user roles to a user, I cannot create a vm and get an
> error "User is not authorized to perform this action". I tried setting
> it on the system level, DC level and cluster level.
>
> I needed to give this user an administrator role with only exactly the
> same vm and disk permissions (nothing extra) and things work ok, but he
> can now login to the admin portal. So I blocked it with a .htaccess
> which is not the prettiest solution.
>
> Am I doing things wrong?
>
> Also the user disappeared from the "System permissions" overview but can
> still login, which is a bit weird.
>
> Kind regards,
>
> Jorick Astrego
> Netbulae
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
--------------020802020500080801040002
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta content="text/html; charset=UTF-8"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi, <br>
<br>
Sorry let be a bit more clear. I want to have a user that can log
into the user portal and create vm's, stop them, add disks etc. But
only as a user.<br>
<br>
I tried the poweruser role and can do all things <u>except </u>creating
a new VM. I also want the user to only see and manipulate his own
VM's and not the other ones running on the same system.<br>
<br>
Even with the PowerUser role, I am not able to create a new VM as
this user. Also when I edit the built-in PowerUser role, I only see
the following rights selected:<br>
<br>
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root0_node0_node2" tabindex="-1"
checked="checked" disabled="disabled"
type="checkbox"></span><span>Login
Permissions<br>
<br>
</span>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root2" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Template</span></div>
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root2_node1" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Provisioning
Operations</span></div>
</div>
</div>
<div aria-level="3" aria-posinset="1"
aria-setsize="3"
role="treeitem" aria-selected="true">
<div style="padding-left: 32px;" class="GPDB324CAIB
GPDB324CGIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root2_node1_node0"
tabindex="-1" checked="checked"
disabled="disabled"
type="checkbox"></span><span>Create</span></div>
</div>
</div>
</div>
<br>
</div>
<span>VM</span>
<div aria-level="2" aria-expanded="false"
aria-posinset="1"
aria-setsize="3" role="treeitem"
aria-selected="false">
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
</div>
</div>
</div>
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root3_node1" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Provisioning
Operations</span></div>
</div>
</div>
<div aria-level="3" aria-posinset="1"
aria-setsize="5"
role="treeitem" aria-selected="false">
<div style="padding-left: 32px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root3_node1_node0"
tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Edit
properties</span></div>
</div>
</div>
</div>
<div aria-level="3" aria-posinset="2"
aria-setsize="5"
role="treeitem" aria-selected="true">
<div style="padding-left: 32px;" class="GPDB324CAIB
GPDB324CGIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div tabindex="0"
class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root3_node1_node1"
tabindex="-1"
checked="checked" disabled="disabled"
type="checkbox"></span><span>Create</span></div>
</div>
</div>
</div>
<br>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root5" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Disk</span></div>
<div style="padding-left: 16px;" class="GPDB324CAIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CBIB" style="left: 0px;width: 15px;height:
15px;position:absolute;"><br>
</div>
<div class="GPDB324CDIB GPDB324CFIB"><span><input
id="RolePopupView_tree_root5_node0" tabindex="-1"
disabled="disabled"
type="checkbox"></span><span>Provisioning
Operations</span></div>
</div>
</div>
<div aria-level="3" aria-posinset="1"
aria-setsize="6"
role="treeitem" aria-selected="true">
<div style="padding-left: 32px;" class="GPDB324CAIB
GPDB324CGIB">
<div onclick="" style="padding-left:
16px;position:relative;"
class="GPDB324CAIB GPDB324CCIB">
<div class="GPDB324CDIB"><span><input
id="RolePopupView_tree_root5_node0_node0"
tabindex="-1"
checked="checked" disabled="disabled"
type="checkbox"></span><span>Create</span></div>
</div>
</div>
</div>
<br>
Everything else is deselected.<br>
<br>
Kind regards,<br>
<br>
Jorick Astrego<br>
Netbulae<br>
<br>
<div class="moz-cite-prefix">On 07/22/2014 10:35 AM, Oved Ourfali
wrote:<br>
</div>
<blockquote
cite="mid:1074377558.11486624.1406018123359.JavaMail.zimbra@redhat.com"
type="cite">
<pre wrap="">Hi
You didn't really specify what you would like to accomplish, and what permissions were
granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin portal.
So, as long as you don't assign the user with admin role he will not be able to login
to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks through the user
portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "Jorick Astrego" <a
class="moz-txt-link-rfc2396E"
href="mailto:j.astrego@netbulae.eu"><j.astrego@netbulae.eu></a>
To: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated"
href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a class="moz-txt-link-freetext"
href="http://lists.ovirt.org/mailman/listinfo/users">http://...
</pre>
</blockquote>
</blockquote>
<br>
</body>
</html>
--------------020802020500080801040002--
4:16 a.m.
On what object did you assign the PowerUser role?
A permission consist of user+role+object.
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
To: users(a)ovirt.org
Sent: Tuesday, July 22, 2014 11:43:43 AM
Subject: Re: [ovirt-users] user permissions
Hi,
Sorry let be a bit more clear. I want to have a user that can log into the
user portal and create vm's, stop them, add disks etc. But only as a user.
I tried the poweruser role and can do all things except creating a new VM. I
also want the user to only see and manipulate his own VM's and not the other
ones running on the same system.
Even with the PowerUser role, I am not able to create a new VM as this user.
Also when I edit the built-in PowerUser role, I only see the following
rights selected:
Login Permissions
Template
Provisioning Operations
Create
VM
Provisioning Operations
Edit properties
Create
Disk
Provisioning Operations
Create
Everything else is deselected.
Kind regards,
Jorick Astrego
Netbulae
On 07/22/2014 10:35 AM, Oved Ourfali wrote:
Hi
You didn't really specify what you would like to accomplish, and what
permissions were granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin
portal.
So, as long as you don't assign the user with admin role he will not be able
to login to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks
through the user portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To: users(a)ovirt.org Sent:
Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
_______________________________________________
Users mailing list Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
4:26 a.m.
I had it set on the system (with the configure button) and the DC but
tried every combination I could think off.
Also created a new user type role with all the user permissions selected.
Kind regards,
Jorick Astrego
On 07/22/2014 11:16 AM, Oved Ourfali wrote:
On what object did you assign the PowerUser role?
A permission consist of user+role+object.
----- Original Message -----
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
> To: users(a)ovirt.org
> Sent: Tuesday, July 22, 2014 11:43:43 AM
> Subject: Re: [ovirt-users] user permissions
>
> Hi,
>
> Sorry let be a bit more clear. I want to have a user that can log into the
> user portal and create vm's, stop them, add disks etc. But only as a user.
>
> I tried the poweruser role and can do all things except creating a new VM. I
> also want the user to only see and manipulate his own VM's and not the other
> ones running on the same system.
>
> Even with the PowerUser role, I am not able to create a new VM as this user.
> Also when I edit the built-in PowerUser role, I only see the following
> rights selected:
>
> Login Permissions
>
> Template
>
> Provisioning Operations
> Create
>
> VM
>
>
> Provisioning Operations
> Edit properties
> Create
>
> Disk
>
> Provisioning Operations
> Create
>
> Everything else is deselected.
>
> Kind regards,
>
> Jorick Astrego
> Netbulae
>
> On 07/22/2014 10:35 AM, Oved Ourfali wrote:
>
>
>
> Hi
>
> You didn't really specify what you would like to accomplish, and what
> permissions were granted and on what object.
> In general, we have two types of roles: User and Admin roles.
> If a user has any admin role on any object, then he can login to the admin
> portal.
> So, as long as you don't assign the user with admin role he will not be able
> to login to the admin portal.
>
> Giving PowerUser role on a DC will allow the user to create VMs and Disks
> through the user portal.
> Is that what you would like to accomplish?
>
> Oved
>
> ----- Original Message -----
>
>
>
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To: users(a)ovirt.org
Sent:
> Tuesday, July 22, 2014 11:32:16 AM
> Subject: [ovirt-users] user permissions
>
> Hi,
>
> In our 3.4.3 environment I started adding external users (it is
> connected to a freeipa server) and I'm having some problems setting the
> correct permissions.
>
> When I give all user roles to a user, I cannot create a vm and get an
> error "User is not authorized to perform this action". I tried setting
> it on the system level, DC level and cluster level.
>
> I needed to give this user an administrator role with only exactly the
> same vm and disk permissions (nothing extra) and things work ok, but he
> can now login to the admin portal. So I blocked it with a .htaccess
> which is not the prettiest solution.
>
> Am I doing things wrong?
>
> Also the user disappeared from the "System permissions" overview but can
> still login, which is a bit weird.
>
> Kind regards,
>
> Jorick Astrego
> Netbulae
>
> _______________________________________________
> Users mailing list Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
5:16 a.m.
Setting PowerUser for some user on System or on a DC should be enough to create VMs on
it.
What error do you get?
Can you share your logs?
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
Cc: users(a)ovirt.org
Sent: Tuesday, July 22, 2014 12:26:38 PM
Subject: Re: [ovirt-users] user permissions
I had it set on the system (with the configure button) and the DC but
tried every combination I could think off.
Also created a new user type role with all the user permissions selected.
Kind regards,
Jorick Astrego
On 07/22/2014 11:16 AM, Oved Ourfali wrote:
> On what object did you assign the PowerUser role?
> A permission consist of user+role+object.
>
> ----- Original Message -----
>> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
>> To: users(a)ovirt.org
>> Sent: Tuesday, July 22, 2014 11:43:43 AM
>> Subject: Re: [ovirt-users] user permissions
>>
>> Hi,
>>
>> Sorry let be a bit more clear. I want to have a user that can log into the
>> user portal and create vm's, stop them, add disks etc. But only as a user.
>>
>> I tried the poweruser role and can do all things except creating a new VM.
>> I
>> also want the user to only see and manipulate his own VM's and not the
>> other
>> ones running on the same system.
>>
>> Even with the PowerUser role, I am not able to create a new VM as this
>> user.
>> Also when I edit the built-in PowerUser role, I only see the following
>> rights selected:
>>
>> Login Permissions
>>
>> Template
>>
>> Provisioning Operations
>> Create
>>
>> VM
>>
>>
>> Provisioning Operations
>> Edit properties
>> Create
>>
>> Disk
>>
>> Provisioning Operations
>> Create
>>
>> Everything else is deselected.
>>
>> Kind regards,
>>
>> Jorick Astrego
>> Netbulae
>>
>> On 07/22/2014 10:35 AM, Oved Ourfali wrote:
>>
>>
>>
>> Hi
>>
>> You didn't really specify what you would like to accomplish, and what
>> permissions were granted and on what object.
>> In general, we have two types of roles: User and Admin roles.
>> If a user has any admin role on any object, then he can login to the admin
>> portal.
>> So, as long as you don't assign the user with admin role he will not be
>> able
>> to login to the admin portal.
>>
>> Giving PowerUser role on a DC will allow the user to create VMs and Disks
>> through the user portal.
>> Is that what you would like to accomplish?
>>
>> Oved
>>
>> ----- Original Message -----
>>
>>
>>
>> From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To:
users(a)ovirt.org Sent:
>> Tuesday, July 22, 2014 11:32:16 AM
>> Subject: [ovirt-users] user permissions
>>
>> Hi,
>>
>> In our 3.4.3 environment I started adding external users (it is
>> connected to a freeipa server) and I'm having some problems setting the
>> correct permissions.
>>
>> When I give all user roles to a user, I cannot create a vm and get an
>> error "User is not authorized to perform this action". I tried
setting
>> it on the system level, DC level and cluster level.
>>
>> I needed to give this user an administrator role with only exactly the
>> same vm and disk permissions (nothing extra) and things work ok, but he
>> can now login to the admin portal. So I blocked it with a .htaccess
>> which is not the prettiest solution.
>>
>> Am I doing things wrong?
>>
>> Also the user disappeared from the "System permissions" overview but
can
>> still login, which is a bit weird.
>>
>> Kind regards,
>>
>> Jorick Astrego
>> Netbulae
>>
>> _______________________________________________
>> Users mailing list Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
5:57 a.m.
This is a multi-part message in MIME format.
--------------090900020101000102060405
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
The only relevant things I see in the log are lots of these:
2014-07-22 09:52:46,867 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-12) Query execution failed due to insufficient
permissions.
2014-07-22 09:52:46,867 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-12) Query execution failed due to insufficient
permissions.
2014-07-22 09:53:46,869 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 09:53:46,869 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 09:54:46,865 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 09:54:46,865 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 10:27:46,879 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 10:27:46,880 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 10:28:46,949 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:28:46,950 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:29:46,887 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-4) Query execution failed due to insufficient
permissions.
2014-07-22 10:29:46,887 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-4) Query execution failed due to insufficient
permissions.
2014-07-22 10:36:46,911 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-13) Query execution failed due to insufficient
permissions.
2014-07-22 10:36:46,911 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-13) Query execution failed due to insufficient
permissions.
2014-07-22 10:37:46,924 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:37:46,924 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:38:46,966 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 10:38:46,967 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 10:39:46,941 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 10:39:46,942 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
Kind regards,
Jorick
On 07/22/2014 12:16 PM, Oved Ourfali wrote:
Setting PowerUser for some user on System or on a DC should be enough
to create VMs on it.
What error do you get?
Can you share your logs?
----- Original Message -----
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
> Cc: users(a)ovirt.org
> Sent: Tuesday, July 22, 2014 12:26:38 PM
> Subject: Re: [ovirt-users] user permissions
>
> I had it set on the system (with the configure button) and the DC but
> tried every combination I could think off.
>
> Also created a new user type role with all the user permissions selected.
>
> Kind regards,
> Jorick Astrego
>
>
>
> On 07/22/2014 11:16 AM, Oved Ourfali wrote:
>> On what object did you assign the PowerUser role?
>> A permission consist of user+role+object.
>>
>> ----- Original Message -----
>>> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
>>> To: users(a)ovirt.org
>>> Sent: Tuesday, July 22, 2014 11:43:43 AM
>>> Subject: Re: [ovirt-users] user permissions
>>>
>>> Hi,
>>>
>>> Sorry let be a bit more clear. I want to have a user that can log into the
>>> user portal and create vm's, stop them, add disks etc. But only as a
user.
>>>
>>> I tried the poweruser role and can do all things except creating a new VM.
>>> I
>>> also want the user to only see and manipulate his own VM's and not the
>>> other
>>> ones running on the same system.
>>>
>>> Even with the PowerUser role, I am not able to create a new VM as this
>>> user.
>>> Also when I edit the built-in PowerUser role, I only see the following
>>> rights selected:
>>>
>>> Login Permissions
>>>
>>> Template
>>>
>>> Provisioning Operations
>>> Create
>>>
>>> VM
>>>
>>>
>>> Provisioning Operations
>>> Edit properties
>>> Create
>>>
>>> Disk
>>>
>>> Provisioning Operations
>>> Create
>>>
>>> Everything else is deselected.
>>>
>>> Kind regards,
>>>
>>> Jorick Astrego
>>> Netbulae
>>>
>>> On 07/22/2014 10:35 AM, Oved Ourfali wrote:
>>>
>>>
>>>
>>> Hi
>>>
>>> You didn't really specify what you would like to accomplish, and what
>>> permissions were granted and on what object.
>>> In general, we have two types of roles: User and Admin roles.
>>> If a user has any admin role on any object, then he can login to the admin
>>> portal.
>>> So, as long as you don't assign the user with admin role he will not be
>>> able
>>> to login to the admin portal.
>>>
>>> Giving PowerUser role on a DC will allow the user to create VMs and Disks
>>> through the user portal.
>>> Is that what you would like to accomplish?
>>>
>>> Oved
>>>
>>> ----- Original Message -----
>>>
>>>
>>>
>>> From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To:
users(a)ovirt.org Sent:
>>> Tuesday, July 22, 2014 11:32:16 AM
>>> Subject: [ovirt-users] user permissions
>>>
>>> Hi,
>>>
>>> In our 3.4.3 environment I started adding external users (it is
>>> connected to a freeipa server) and I'm having some problems setting the
>>> correct permissions.
>>>
>>> When I give all user roles to a user, I cannot create a vm and get an
>>> error "User is not authorized to perform this action". I tried
setting
>>> it on the system level, DC level and cluster level.
>>>
>>> I needed to give this user an administrator role with only exactly the
>>> same vm and disk permissions (nothing extra) and things work ok, but he
>>> can now login to the admin portal. So I blocked it with a .htaccess
>>> which is not the prettiest solution.
>>>
>>> Am I doing things wrong?
>>>
>>> Also the user disappeared from the "System permissions" overview
but can
>>> still login, which is a bit weird.
>>>
>>> Kind regards,
>>>
>>> Jorick Astrego
>>> Netbulae
>>>
>>> _______________________________________________
>>> Users mailing list Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
--------------090900020101000102060405
Content-Type: multipart/related;
boundary="------------000501090604080905040105"
--------------000501090604080905040105
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=UTF-8"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<img src="cid:part1.00030703.06000805@netbulae.eu"
alt=""><br>
The only relevant things I see in the log are lots of these:<br>
<br>
2014-07-22 09:52:46,867 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-12)
Query execution failed due to insufficient permissions.<br>
2014-07-22 09:52:46,867 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-12)
Query execution failed due to insufficient permissions.<br>
2014-07-22 09:53:46,869 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-5)
Query execution failed due to insufficient permissions.<br>
2014-07-22 09:53:46,869 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-5)
Query execution failed due to insufficient permissions.<br>
2014-07-22 09:54:46,865 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-8)
Query execution failed due to insufficient permissions.<br>
2014-07-22 09:54:46,865 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-8)
Query execution failed due to insufficient permissions.<br>
<br>
2014-07-22 10:27:46,879 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-5)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:27:46,880 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-5)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:28:46,949 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-1)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:28:46,950 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-1)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:29:46,887 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-4)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:29:46,887 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-4)
Query execution failed due to insufficient permissions.<br>
<br>
2014-07-22 10:36:46,911 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-13)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:36:46,911 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-13)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:37:46,924 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-1)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:37:46,924 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-1)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:38:46,966 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-8)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:38:46,967 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-8)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:39:46,941 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-5)
Query execution failed due to insufficient permissions.<br>
2014-07-22 10:39:46,942 ERROR
[org.ovirt.engine.core.bll.SearchQuery] (ajp--127.0.0.1-8702-5)
Query execution failed due to insufficient permissions.<br>
<br>
Kind regards,<br>
Jorick<br>
<br>
<br>
<div class="moz-cite-prefix">On 07/22/2014 12:16 PM, Oved Ourfali
wrote:<br>
</div>
<blockquote
cite="mid:1525398115.11503503.1406024194831.JavaMail.zimbra@redhat.com"
type="cite">
<pre wrap="">Setting PowerUser for some user on System or on a DC
should be enough to create VMs on it.
What error do you get?
Can you share your logs?
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "Jorick Astrego" <a
class="moz-txt-link-rfc2396E"
href="mailto:j.astrego@netbulae.eu"><j.astrego@netbulae.eu></a>
Cc: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Tuesday, July 22, 2014 12:26:38 PM
Subject: Re: [ovirt-users] user permissions
I had it set on the system (with the configure button) and the DC but
tried every combination I could think off.
Also created a new user type role with all the user permissions selected.
Kind regards,
Jorick Astrego
On 07/22/2014 11:16 AM, Oved Ourfali wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On what object did you assign the PowerUser role?
A permission consist of user+role+object.
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "Jorick Astrego" <a
class="moz-txt-link-rfc2396E"
href="mailto:j.astrego@netbulae.eu"><j.astrego@netbulae.eu></a>
To: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Tuesday, July 22, 2014 11:43:43 AM
Subject: Re: [ovirt-users] user permissions
Hi,
Sorry let be a bit more clear. I want to have a user that can log into the
user portal and create vm's, stop them, add disks etc. But only as a user.
I tried the poweruser role and can do all things except creating a new VM.
I
also want the user to only see and manipulate his own VM's and not the
other
ones running on the same system.
Even with the PowerUser role, I am not able to create a new VM as this
user.
Also when I edit the built-in PowerUser role, I only see the following
rights selected:
Login Permissions
Template
Provisioning Operations
Create
VM
Provisioning Operations
Edit properties
Create
Disk
Provisioning Operations
Create
Everything else is deselected.
Kind regards,
Jorick Astrego
Netbulae
On 07/22/2014 10:35 AM, Oved Ourfali wrote:
Hi
You didn't really specify what you would like to accomplish, and what
permissions were granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin
portal.
So, as long as you don't assign the user with admin role he will not be
able
to login to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks
through the user portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
From: "Jorick Astrego" <a class="moz-txt-link-rfc2396E"
href="mailto:j.astrego@netbulae.eu"><j.astrego@netbulae.eu></a>
To: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a> Sent:
Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
_______________________________________________
Users mailing list <a class="moz-txt-link-abbreviated"
href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a class="moz-txt-link-freetext"
href="http://lists.ovirt.org/mailman/listinfo/users">http://...
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated"
href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a class="moz-txt-link-freetext"
href="http://lists.ovirt.org/mailman/listinfo/users">http://...
</pre>
</blockquote>
</blockquote>
<pre wrap="">
_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated"
href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a class="moz-txt-link-freetext"
href="http://lists.ovirt.org/mailman/listinfo/users">http://...
</pre>
</blockquote>
</blockquote>
<br>
</body>
</html>
--------------000501090604080905040105
Content-Type: image/png;
name="iebdcbdj.png"
Content-Transfer-Encoding: base64
Content-ID: <part1.00030703.06000805(a)netbulae.eu>
Content-Disposition: inline;
filename="iebdcbdj.png"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--------------000501090604080905040105--
--------------090900020101000102060405--
6:04 a.m.
Please open a bug on that.
But please provide full details, what permissions on what object, and what dialog are you
opening, what operation are you trying to do, with the complete logs.
Thanks,
Oved
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
Cc: users(a)ovirt.org
Sent: Tuesday, July 22, 2014 1:57:44 PM
Subject: Re: [ovirt-users] user permissions
The only relevant things I see in the log are lots of these:
2014-07-22 09:52:46,867 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-12) Query execution failed due to insufficient
permissions.
2014-07-22 09:52:46,867 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-12) Query execution failed due to insufficient
permissions.
2014-07-22 09:53:46,869 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 09:53:46,869 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 09:54:46,865 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 09:54:46,865 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 10:27:46,879 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 10:27:46,880 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 10:28:46,949 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:28:46,950 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:29:46,887 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-4) Query execution failed due to insufficient
permissions.
2014-07-22 10:29:46,887 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-4) Query execution failed due to insufficient
permissions.
2014-07-22 10:36:46,911 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-13) Query execution failed due to insufficient
permissions.
2014-07-22 10:36:46,911 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-13) Query execution failed due to insufficient
permissions.
2014-07-22 10:37:46,924 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:37:46,924 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
permissions.
2014-07-22 10:38:46,966 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 10:38:46,967 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
permissions.
2014-07-22 10:39:46,941 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
2014-07-22 10:39:46,942 ERROR [org.ovirt.engine.core.bll.SearchQuery]
(ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
permissions.
Kind regards,
Jorick
On 07/22/2014 12:16 PM, Oved Ourfali wrote:
Setting PowerUser for some user on System or on a DC should be enough to
create VMs on it.
What error do you get?
Can you share your logs?
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu> Cc: users(a)ovirt.org Sent:
Tuesday, July 22, 2014 12:26:38 PM
Subject: Re: [ovirt-users] user permissions
I had it set on the system (with the configure button) and the DC but
tried every combination I could think off.
Also created a new user type role with all the user permissions selected.
Kind regards,
Jorick Astrego
On 07/22/2014 11:16 AM, Oved Ourfali wrote:
On what object did you assign the PowerUser role?
A permission consist of user+role+object.
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To: users(a)ovirt.org Sent:
Tuesday, July 22, 2014 11:43:43 AM
Subject: Re: [ovirt-users] user permissions
Hi,
Sorry let be a bit more clear. I want to have a user that can log into the
user portal and create vm's, stop them, add disks etc. But only as a user.
I tried the poweruser role and can do all things except creating a new VM.
I
also want the user to only see and manipulate his own VM's and not the
other
ones running on the same system.
Even with the PowerUser role, I am not able to create a new VM as this
user.
Also when I edit the built-in PowerUser role, I only see the following
rights selected:
Login Permissions
Template
Provisioning Operations
Create
VM
Provisioning Operations
Edit properties
Create
Disk
Provisioning Operations
Create
Everything else is deselected.
Kind regards,
Jorick Astrego
Netbulae
On 07/22/2014 10:35 AM, Oved Ourfali wrote:
Hi
You didn't really specify what you would like to accomplish, and what
permissions were granted and on what object.
In general, we have two types of roles: User and Admin roles.
If a user has any admin role on any object, then he can login to the admin
portal.
So, as long as you don't assign the user with admin role he will not be
able
to login to the admin portal.
Giving PowerUser role on a DC will allow the user to create VMs and Disks
through the user portal.
Is that what you would like to accomplish?
Oved
----- Original Message -----
From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To: users(a)ovirt.org Sent:
Tuesday, July 22, 2014 11:32:16 AM
Subject: [ovirt-users] user permissions
Hi,
In our 3.4.3 environment I started adding external users (it is
connected to a freeipa server) and I'm having some problems setting the
correct permissions.
When I give all user roles to a user, I cannot create a vm and get an
error "User is not authorized to perform this action". I tried setting
it on the system level, DC level and cluster level.
I needed to give this user an administrator role with only exactly the
same vm and disk permissions (nothing extra) and things work ok, but he
can now login to the admin portal. So I blocked it with a .htaccess
which is not the prettiest solution.
Am I doing things wrong?
Also the user disappeared from the "System permissions" overview but can
still login, which is a bit weird.
Kind regards,
Jorick Astrego
Netbulae
_______________________________________________
Users mailing list Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3:35 a.m.
Hi
I was able to reproduce similar errors in the log, but with regards to GetRngQeury and not
SearchQuery.
And, it caused an issue with selecting an instance type, but I was able to create a VM
successfully, while being only a PowerUser on the DC.
I'll post the fix for that.
What version are you using?
Perhaps your issue was already solved?
Did you open a bug on your issue?
Thanks,
Oved
----- Original Message -----
From: "Oved Ourfali" <ovedo(a)redhat.com>
To: "Jorick Astrego" <j.astrego(a)netbulae.eu>
Cc: users(a)ovirt.org
Sent: Tuesday, July 22, 2014 2:04:01 PM
Subject: Re: [ovirt-users] user permissions
Please open a bug on that.
But please provide full details, what permissions on what object, and what
dialog are you opening, what operation are you trying to do, with the
complete logs.
Thanks,
Oved
----- Original Message -----
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu>
> Cc: users(a)ovirt.org
> Sent: Tuesday, July 22, 2014 1:57:44 PM
> Subject: Re: [ovirt-users] user permissions
>
>
> The only relevant things I see in the log are lots of these:
>
> 2014-07-22 09:52:46,867 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-12) Query execution failed due to insufficient
> permissions.
> 2014-07-22 09:52:46,867 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-12) Query execution failed due to insufficient
> permissions.
> 2014-07-22 09:53:46,869 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
> permissions.
> 2014-07-22 09:53:46,869 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
> permissions.
> 2014-07-22 09:54:46,865 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
> permissions.
> 2014-07-22 09:54:46,865 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
> permissions.
>
> 2014-07-22 10:27:46,879 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:27:46,880 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:28:46,949 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:28:46,950 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:29:46,887 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-4) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:29:46,887 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-4) Query execution failed due to insufficient
> permissions.
>
> 2014-07-22 10:36:46,911 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-13) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:36:46,911 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-13) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:37:46,924 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:37:46,924 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-1) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:38:46,966 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:38:46,967 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-8) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:39:46,941 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
> permissions.
> 2014-07-22 10:39:46,942 ERROR [org.ovirt.engine.core.bll.SearchQuery]
> (ajp--127.0.0.1-8702-5) Query execution failed due to insufficient
> permissions.
>
> Kind regards,
> Jorick
>
>
> On 07/22/2014 12:16 PM, Oved Ourfali wrote:
>
>
>
> Setting PowerUser for some user on System or on a DC should be enough to
> create VMs on it.
> What error do you get?
> Can you share your logs?
>
> ----- Original Message -----
>
>
>
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu> Cc: users(a)ovirt.org
Sent:
> Tuesday, July 22, 2014 12:26:38 PM
> Subject: Re: [ovirt-users] user permissions
>
> I had it set on the system (with the configure button) and the DC but
> tried every combination I could think off.
>
> Also created a new user type role with all the user permissions selected.
>
> Kind regards,
> Jorick Astrego
>
>
>
> On 07/22/2014 11:16 AM, Oved Ourfali wrote:
>
>
>
> On what object did you assign the PowerUser role?
> A permission consist of user+role+object.
>
> ----- Original Message -----
>
>
>
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To: users(a)ovirt.org
Sent:
> Tuesday, July 22, 2014 11:43:43 AM
> Subject: Re: [ovirt-users] user permissions
>
> Hi,
>
> Sorry let be a bit more clear. I want to have a user that can log into the
> user portal and create vm's, stop them, add disks etc. But only as a user.
>
> I tried the poweruser role and can do all things except creating a new VM.
> I
> also want the user to only see and manipulate his own VM's and not the
> other
> ones running on the same system.
>
> Even with the PowerUser role, I am not able to create a new VM as this
> user.
> Also when I edit the built-in PowerUser role, I only see the following
> rights selected:
>
> Login Permissions
>
> Template
>
> Provisioning Operations
> Create
>
> VM
>
>
> Provisioning Operations
> Edit properties
> Create
>
> Disk
>
> Provisioning Operations
> Create
>
> Everything else is deselected.
>
> Kind regards,
>
> Jorick Astrego
> Netbulae
>
> On 07/22/2014 10:35 AM, Oved Ourfali wrote:
>
>
>
> Hi
>
> You didn't really specify what you would like to accomplish, and what
> permissions were granted and on what object.
> In general, we have two types of roles: User and Admin roles.
> If a user has any admin role on any object, then he can login to the admin
> portal.
> So, as long as you don't assign the user with admin role he will not be
> able
> to login to the admin portal.
>
> Giving PowerUser role on a DC will allow the user to create VMs and Disks
> through the user portal.
> Is that what you would like to accomplish?
>
> Oved
>
> ----- Original Message -----
>
>
>
> From: "Jorick Astrego" <j.astrego(a)netbulae.eu> To: users(a)ovirt.org
Sent:
> Tuesday, July 22, 2014 11:32:16 AM
> Subject: [ovirt-users] user permissions
>
> Hi,
>
> In our 3.4.3 environment I started adding external users (it is
> connected to a freeipa server) and I'm having some problems setting the
> correct permissions.
>
> When I give all user roles to a user, I cannot create a vm and get an
> error "User is not authorized to perform this action". I tried setting
> it on the system level, DC level and cluster level.
>
> I needed to give this user an administrator role with only exactly the
> same vm and disk permissions (nothing extra) and things work ok, but he
> can now login to the admin portal. So I blocked it with a .htaccess
> which is not the prettiest solution.
>
> Am I doing things wrong?
>
> Also the user disappeared from the "System permissions" overview but can
> still login, which is a bit weird.
>
> Kind regards,
>
> Jorick Astrego
> Netbulae
>
> _______________________________________________
> Users mailing list Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3822
days inactive
3823
days old
9 comments
2 participants
participants (2)
-
Jorick Astrego -
Oved Ourfali