From andrej.bagon at arnes.si Wed Jun 12 08:42:12 2013 Content-Type: multipart/mixed; boundary="===============7975263955445575972==" MIME-Version: 1.0 From: Andrej Bagon To: users at ovirt.org Subject: Re: [Users] user can not create a snapshot Date: Wed, 12 Jun 2013 14:42:09 +0200 Message-ID: <51B86CA1.1060301@arnes.si> In-Reply-To: 1710392180.1345572.1370959208075.JavaMail.root@redhat.com --===============7975263955445575972== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format. --------------060307090702080609020200 Content-Type: text/plain; charset=3DUTF-8 Content-Transfer-Encoding: 7bit Hi, I digged into the problem and the user has the UserVmManager privileges on the VM. The problem must be with the creation of the VM from template, where the userfrontend does not assign the right quota to the disk when creating a vm from template. This was also notified by Jure in the "[Users] Disk quota and templates bug?" thread. If I assign the right dick quota to the user (his quota) the snapshoting works. We will wait for the fix on the create vm from template disk quota fix. Thank you. On 06/11/2013 04:00 PM, Allon Mureinik wrote: > The required action group is MANIPULATE_VM_SNAPSHOTS. > It can be found in the roles UserVmManager, SuperUser, ClusterAdmin > and DataCenterAdmin. > > If that does not do the trick - check the user's quota - maybe he's out. > ------------------------------------------------------------------------ > > *From: *"Andrej Bagon" > *To: *"users" > *Sent: *Monday, June 10, 2013 1:08:13 PM > *Subject: *[Users] user can not create a snapshot > > Hi, > > I have a user with VmCreator rights in the datacenter. He can > create, edit, manipulate his own virtual macihnes, but he can not > add a snapshot to his own virtual machines. What rights do I have > to give him also, so he can have the snapshot functionality as > well? Right now he does get a " Error while executing action: User > is not authorized to perform this action." message. The Virtual > machine is powered down at the time of taking a snapshot. > > Thank You. > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > --------------060307090702080609020200 Content-Type: text/html; charset=3DUTF-8 Content-Transfer-Encoding: 8bit
Hi,

I digged into the problem and the user has the UserVmManager privileges on the VM. The problem must be with the creation of the VM from template, where the userfrontend does not assign the right quota to the disk when creating a vm from template. This was also notified by Jure in the "[Users] Disk quota and templates bug?" thread.

If I assign the right dick quota to the user (his quota) the snapshoting works.

We will wait for the fix on the create vm from template disk quota fix.

Thank you.

On 06/11/2013 04:00 PM, Allon Mureinik wrote:
The required action group is MANIPULATE_VM_SNAPSHOTS.
It can be found in the roles=C2=A0UserVmManager,=C2=A0SuperUser,=C2=A0ClusterAdmin and=C2=A0DataCenterAdmin.

If that does not do the trick - check the user's quota - maybe he's out.
From: "Andrej Bagon" <andrej.bagon(a)arnes.si>
To: "users" <users(a)ovirt.org>
Sent: Monday, June 10, 2013 1:08:13 PM
Subject: [Users] user can not create a snapshot

Hi,

I have a user with VmCreator=C2=A0 rights in the datacenter. He c= an create, edit, manipulate his own virtual macihnes, but he can not add a snapshot to his own virtual machines. What rights do I have to give him also, so he can have the snapshot functionality as well? Right now he does get a " Error while executing action: User is not authorized to perform this action." message. The Virtual machine is powered down at the time of taking a snapshot.

Thank You.
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users<= br>


--------------060307090702080609020200-- --===============7975263955445575972== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" VGhpcyBpcyBhIG11bHRpLXBhcnQgbWVzc2FnZSBpbiBNSU1FIGZvcm1hdC4KLS0tLS0tLS0tLS0t LS0wNjAzMDcwOTA3MDIwODA2MDkwMjAyMDAKQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFy c2V0PVVURi04CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IDdiaXQKCkhpLAoKSSBkaWdnZWQg aW50byB0aGUgcHJvYmxlbSBhbmQgdGhlIHVzZXIgaGFzIHRoZSBVc2VyVm1NYW5hZ2VyIHByaXZp bGVnZXMKb24gdGhlIFZNLiBUaGUgcHJvYmxlbSBtdXN0IGJlIHdpdGggdGhlIGNyZWF0aW9uIG9m IHRoZSBWTSBmcm9tCnRlbXBsYXRlLCB3aGVyZSB0aGUgdXNlcmZyb250ZW5kIGRvZXMgbm90IGFz c2lnbiB0aGUgcmlnaHQgcXVvdGEgdG8gdGhlCmRpc2sgd2hlbiBjcmVhdGluZyBhIHZtIGZyb20g dGVtcGxhdGUuIFRoaXMgd2FzIGFsc28gbm90aWZpZWQgYnkgSnVyZSBpbgp0aGUgIltVc2Vyc10g RGlzayBxdW90YSBhbmQgdGVtcGxhdGVzIGJ1Zz8iIHRocmVhZC4KCklmIEkgYXNzaWduIHRoZSBy aWdodCBkaWNrIHF1b3RhIHRvIHRoZSB1c2VyIChoaXMgcXVvdGEpIHRoZSBzbmFwc2hvdGluZwp3 b3Jrcy4KCldlIHdpbGwgd2FpdCBmb3IgdGhlIGZpeCBvbiB0aGUgY3JlYXRlIHZtIGZyb20gdGVt cGxhdGUgZGlzayBxdW90YSBmaXguCgpUaGFuayB5b3UuCgpPbiAwNi8xMS8yMDEzIDA0OjAwIFBN LCBBbGxvbiBNdXJlaW5payB3cm90ZToKPiBUaGUgcmVxdWlyZWQgYWN0aW9uIGdyb3VwIGlzIE1B TklQVUxBVEVfVk1fU05BUFNIT1RTLgo+IEl0IGNhbiBiZSBmb3VuZCBpbiB0aGUgcm9sZXMgVXNl clZtTWFuYWdlciwgU3VwZXJVc2VyLCBDbHVzdGVyQWRtaW4KPiBhbmQgRGF0YUNlbnRlckFkbWlu Lgo+Cj4gSWYgdGhhdCBkb2VzIG5vdCBkbyB0aGUgdHJpY2sgLSBjaGVjayB0aGUgdXNlcidzIHF1 b3RhIC0gbWF5YmUgaGUncyBvdXQuCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCj4KPiAgICAgKkZyb206ICoi QW5kcmVqIEJhZ29uIiA8YW5kcmVqLmJhZ29uQGFybmVzLnNpPgo+ICAgICAqVG86ICoidXNlcnMi IDx1c2Vyc0BvdmlydC5vcmc+Cj4gICAgICpTZW50OiAqTW9uZGF5LCBKdW5lIDEwLCAyMDEzIDE6 MDg6MTMgUE0KPiAgICAgKlN1YmplY3Q6ICpbVXNlcnNdIHVzZXIgY2FuIG5vdCBjcmVhdGUgYSBz bmFwc2hvdAo+Cj4gICAgIEhpLAo+Cj4gICAgIEkgaGF2ZSBhIHVzZXIgd2l0aCBWbUNyZWF0b3Ig IHJpZ2h0cyBpbiB0aGUgZGF0YWNlbnRlci4gSGUgY2FuCj4gICAgIGNyZWF0ZSwgZWRpdCwgbWFu aXB1bGF0ZSBoaXMgb3duIHZpcnR1YWwgbWFjaWhuZXMsIGJ1dCBoZSBjYW4gbm90Cj4gICAgIGFk ZCBhIHNuYXBzaG90IHRvIGhpcyBvd24gdmlydHVhbCBtYWNoaW5lcy4gV2hhdCByaWdodHMgZG8g SSBoYXZlCj4gICAgIHRvIGdpdmUgaGltIGFsc28sIHNvIGhlIGNhbiBoYXZlIHRoZSBzbmFwc2hv dCBmdW5jdGlvbmFsaXR5IGFzCj4gICAgIHdlbGw/IFJpZ2h0IG5vdyBoZSBkb2VzIGdldCBhICIg RXJyb3Igd2hpbGUgZXhlY3V0aW5nIGFjdGlvbjogVXNlcgo+ICAgICBpcyBub3QgYXV0aG9yaXpl ZCB0byBwZXJmb3JtIHRoaXMgYWN0aW9uLiIgbWVzc2FnZS4gVGhlIFZpcnR1YWwKPiAgICAgbWFj aGluZSBpcyBwb3dlcmVkIGRvd24gYXQgdGhlIHRpbWUgb2YgdGFraW5nIGEgc25hcHNob3QuCj4K PiAgICAgVGhhbmsgWW91Lgo+Cj4gICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCj4gICAgIFVzZXJzIG1haWxpbmcgbGlzdAo+ICAgICBVc2Vyc0Bvdmly dC5vcmcKPiAgICAgaHR0cDovL2xpc3RzLm92aXJ0Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3VzZXJz Cj4KPgoKCi0tLS0tLS0tLS0tLS0tMDYwMzA3MDkwNzAyMDgwNjA5MDIwMjAwCkNvbnRlbnQtVHlw ZTogdGV4dC9odG1sOyBjaGFyc2V0PVVURi04CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IDhi aXQKCjxodG1sPgogIDxoZWFkPgogICAgPG1ldGEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0 PVVURi04IiBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiPgogIDwvaGVhZD4KICA8Ym9keSBiZ2Nv bG9yPSIjRkZGRkZGIiB0ZXh0PSIjMDAwMDAwIj4KICAgIDxkaXYgY2xhc3M9Im1vei1jaXRlLXBy ZWZpeCI+SGksPGJyPgogICAgICA8YnI+CiAgICAgIEkgZGlnZ2VkIGludG8gdGhlIHByb2JsZW0g YW5kIHRoZSB1c2VyIGhhcyB0aGUgVXNlclZtTWFuYWdlcgogICAgICBwcml2aWxlZ2VzIG9uIHRo ZSBWTS4gVGhlIHByb2JsZW0gbXVzdCBiZSB3aXRoIHRoZSBjcmVhdGlvbiBvZiB0aGUKICAgICAg Vk0gZnJvbSB0ZW1wbGF0ZSwgd2hlcmUgdGhlIHVzZXJmcm9udGVuZCBkb2VzIG5vdCBhc3NpZ24g dGhlIHJpZ2h0CiAgICAgIHF1b3RhIHRvIHRoZSBkaXNrIHdoZW4gY3JlYXRpbmcgYSB2bSBmcm9t IHRlbXBsYXRlLiBUaGlzIHdhcyBhbHNvCiAgICAgIG5vdGlmaWVkIGJ5IEp1cmUgaW4gdGhlICJb VXNlcnNdIERpc2sgcXVvdGEgYW5kIHRlbXBsYXRlcyBidWc/IgogICAgICB0aHJlYWQuPGJyPgog ICAgICA8YnI+CiAgICAgIElmIEkgYXNzaWduIHRoZSByaWdodCBkaWNrIHF1b3RhIHRvIHRoZSB1 c2VyIChoaXMgcXVvdGEpIHRoZQogICAgICBzbmFwc2hvdGluZyB3b3Jrcy48YnI+CiAgICAgIDxi cj4KICAgICAgV2Ugd2lsbCB3YWl0IGZvciB0aGUgZml4IG9uIHRoZSBjcmVhdGUgdm0gZnJvbSB0 ZW1wbGF0ZSBkaXNrIHF1b3RhCiAgICAgIGZpeC48YnI+CiAgICAgIDxicj4KICAgICAgVGhhbmsg eW91Ljxicj4KICAgICAgPGJyPgogICAgICBPbiAwNi8xMS8yMDEzIDA0OjAwIFBNLCBBbGxvbiBN dXJlaW5payB3cm90ZTo8YnI+CiAgICA8L2Rpdj4KICAgIDxibG9ja3F1b3RlCiAgICAgIGNpdGU9 Im1pZDoxNzEwMzkyMTgwLjEzNDU1NzIuMTM3MDk1OTIwODA3NS5KYXZhTWFpbC5yb290QHJlZGhh dC5jb20iCiAgICAgIHR5cGU9ImNpdGUiPgogICAgICA8ZGl2IHN0eWxlPSJmb250LWZhbWlseTog dGltZXMgbmV3IHJvbWFuLCBuZXcgeW9yaywgdGltZXMsIHNlcmlmOwogICAgICAgIGZvbnQtc2l6 ZTogMTJwdDsgY29sb3I6ICMwMDAwMDAiPgogICAgICAgIDxkaXY+VGhlIHJlcXVpcmVkIGFjdGlv biBncm91cCBpcyBNQU5JUFVMQVRFX1ZNX1NOQVBTSE9UUy48L2Rpdj4KICAgICAgICA8ZGl2Pkl0 IGNhbiBiZSBmb3VuZCBpbiB0aGUgcm9sZXPCoDxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7 Ij5Vc2VyVm1NYW5hZ2VyLMKgPC9zcGFuPjxzcGFuCiAgICAgICAgICAgIHN0eWxlPSJmb250LXNp emU6IDEycHQ7Ij5TdXBlclVzZXIswqA8L3NwYW4+PHNwYW4KICAgICAgICAgICAgc3R5bGU9ImZv bnQtc2l6ZTogMTJwdDsiPkNsdXN0ZXJBZG1pbiBhbmTCoDwvc3Bhbj48c3BhbgogICAgICAgICAg ICBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyI+RGF0YUNlbnRlckFkbWluLjwvc3Bhbj48L2Rpdj4K ICAgICAgICA8ZGl2PjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7Ij48YnI+CiAgICAgICAg ICA8L3NwYW4+PC9kaXY+CiAgICAgICAgPGRpdj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0 OyI+SWYgdGhhdCBkb2VzIG5vdCBkbyB0aGUKICAgICAgICAgICAgdHJpY2sgLSBjaGVjayB0aGUg dXNlcidzIHF1b3RhIC0gbWF5YmUgaGUncyBvdXQuPC9zcGFuPjwvZGl2PgogICAgICAgIDxociBp ZD0iendjaHIiPgogICAgICAgIDxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXItbGVmdDoycHggc29s aWQKIzEwMTBGRjttYXJnaW4tbGVmdDo1cHg7cGFkZGluZy1sZWZ0OjVweDtjb2xvcjojMDAwO2Zv bnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0eWxlOm5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTtm b250LWZhbWlseTpIZWx2ZXRpY2EsQXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTJwdDsiPjxi PkZyb206CiAgICAgICAgICA8L2I+IkFuZHJlaiBCYWdvbiIgPGEgY2xhc3M9Im1vei10eHQtbGlu ay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOmFuZHJlai5iYWdvbkBhcm5lcy5zaSI+Jmx0O2FuZHJl ai5iYWdvbkBhcm5lcy5zaSZndDs8L2E+PGJyPgogICAgICAgICAgPGI+VG86IDwvYj4idXNlcnMi IDxhIGNsYXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzp1c2Vyc0Bvdmly dC5vcmciPiZsdDt1c2Vyc0BvdmlydC5vcmcmZ3Q7PC9hPjxicj4KICAgICAgICAgIDxiPlNlbnQ6 IDwvYj5Nb25kYXksIEp1bmUgMTAsIDIwMTMgMTowODoxMyBQTTxicj4KICAgICAgICAgIDxiPlN1 YmplY3Q6IDwvYj5bVXNlcnNdIHVzZXIgY2FuIG5vdCBjcmVhdGUgYSBzbmFwc2hvdDxicj4KICAg ICAgICAgIDxkaXY+PGJyPgogICAgICAgICAgPC9kaXY+CiAgICAgICAgICBIaSw8YnI+CiAgICAg ICAgICA8YnI+CiAgICAgICAgICBJIGhhdmUgYSB1c2VyIHdpdGggVm1DcmVhdG9ywqAgcmlnaHRz IGluIHRoZSBkYXRhY2VudGVyLiBIZSBjYW4KICAgICAgICAgIGNyZWF0ZSwgZWRpdCwgbWFuaXB1 bGF0ZSBoaXMgb3duIHZpcnR1YWwgbWFjaWhuZXMsIGJ1dCBoZSBjYW4KICAgICAgICAgIG5vdCBh ZGQgYSBzbmFwc2hvdCB0byBoaXMgb3duIHZpcnR1YWwgbWFjaGluZXMuIFdoYXQgcmlnaHRzIGRv CiAgICAgICAgICBJIGhhdmUgdG8gZ2l2ZSBoaW0gYWxzbywgc28gaGUgY2FuIGhhdmUgdGhlIHNu YXBzaG90CiAgICAgICAgICBmdW5jdGlvbmFsaXR5IGFzIHdlbGw/IFJpZ2h0IG5vdyBoZSBkb2Vz IGdldCBhICIgPHNwYW4KICAgICAgICAgICAgc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtZmFtaWx5OiAnQXJpYWwgVW5pY29kZSBNUycsCiAgICAgICAgICAgIEFyaWFsLCBzYW5zLXNl cmlmOyBmb250LXNpemU6IHNtYWxsOyBmb250LXN0eWxlOiBub3JtYWw7CiAgICAgICAgICAgIGZv bnQtdmFyaWFudDogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzoK ICAgICAgICAgICAgbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0 ZXh0LWFsaWduOgogICAgICAgICAgICBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOgogICAgICAgICAgICBub3JtYWw7IHdpZG93czogYXV0 bzsgd29yZC1zcGFjaW5nOiAwcHg7CiAgICAgICAgICAgIC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwKICAgICAgICAgICAgMjU1LCAyNTUp OyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsgZmxvYXQ6IG5vbmU7Ij5FcnJvcgogICAgICAg ICAgICB3aGlsZSBleGVjdXRpbmcgYWN0aW9uOiBVc2VyIGlzIG5vdCBhdXRob3JpemVkIHRvIHBl cmZvcm0KICAgICAgICAgICAgdGhpcyBhY3Rpb24uIiBtZXNzYWdlLiBUaGUgVmlydHVhbCBtYWNo aW5lIGlzIHBvd2VyZWQgZG93bgogICAgICAgICAgICBhdCB0aGUgdGltZSBvZiB0YWtpbmcgYSBz bmFwc2hvdC48YnI+CiAgICAgICAgICAgIDxicj4KICAgICAgICAgICAgVGhhbmsgWW91Ljxicj4K ICAgICAgICAgIDwvc3Bhbj4gPGJyPgogICAgICAgICAgX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX188YnI+CiAgICAgICAgICBVc2VycyBtYWlsaW5nIGxpc3Q8 YnI+CiAgICAgICAgICA8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJt YWlsdG86VXNlcnNAb3ZpcnQub3JnIj5Vc2Vyc0BvdmlydC5vcmc8L2E+PGJyPgogICAgICAgICAg PGEgY2xhc3M9Im1vei10eHQtbGluay1mcmVldGV4dCIgaHJlZj0iaHR0cDovL2xpc3RzLm92aXJ0 Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3VzZXJzIj5odHRwOi8vbGlzdHMub3ZpcnQub3JnL21haWxt YW4vbGlzdGluZm8vdXNlcnM8L2E+PGJyPgogICAgICAgIDwvYmxvY2txdW90ZT4KICAgICAgICA8 ZGl2Pjxicj4KICAgICAgICA8L2Rpdj4KICAgICAgPC9kaXY+CiAgICA8L2Jsb2NrcXVvdGU+CiAg ICA8YnI+CiAgPC9ib2R5Pgo8L2h0bWw+CgotLS0tLS0tLS0tLS0tLTA2MDMwNzA5MDcwMjA4MDYw OTAyMDIwMC0tCg== --===============7975263955445575972==--