Re: [ovirt-users] api access with poweruser role

28 Oct 2015


      This is a multi-part message in MIME format.
--------------040403070801040202060604
Content-Type: text/plain;
	charset="windows-1252"
Content-Transfer-Encoding: quoted-printable


On 10/26/2015 03=3A14 PM=2C Jorick Astrego wrote=3A
=3E
=3E
=3E On 10/26/2015 02=3A57 PM=2C Ondra Machacek wrote=3A
=3E=3E
=3E=3E
=3E=3E On 10/26/2015 02=3A53 PM=2C Jorick Astrego wrote=3A
=3E=3E=3E Hi=2C
=3E=3E=3E
=3E=3E=3E Currently I=27m trying to add an ovirt compute resource in forman=
 that
=3E=3E=3E is limited to the VM=27s of the user=2E
=3E=3E=3E
=3E=3E=3E When I give this user the PowerUser role=2C I cannot access the a=
pi=3A
=3E=3E=3E
=3E=3E=3E     query execution failed due to insufficient permissions
=3E=3E=3E
=3E=3E
=3E=3E Are you sending header =27Filter=3A true=27 with the request =3F
=3E=3E If your user is not admin=28PowerUserRole is not admin role=29=2C
=3E=3E you have to use this header=2E
=3E=3E
=3E=3E
=3E

Hmm=2C not much response on foreman-users=2E=2E

I checked the code of fog in my foreman install =28
/opt/rh/ruby193/root/usr/share/gems/gems/fog-1=2E32=2E0/lib/fog/ovirt/compu=
te=2Erb
=29 and it appears to have the correct option merged=3A

              connection=5Fopts=5B=3Afiltered=5Fapi=5D  =3D options=5B=3Aov=
irt=5Ffiltered=5Fapi=5D


But I don=27t know what url the foreman actually generates=2C is there any=

way to capture the login string=3F I tried setting some DEBUG logging but=

don=27t get the output I=27m looking for=2E

            =3Clogger category=3D=22org=2Eovirt=2Eengine=2Ecore=2Ebll=2ESea=
rchQuery=22=3E
                    =3Clevel name=3D=22DEBUG=22/=3E
            =3C/logger=3E
            =3Clogger
    category=3D=22org=2Eovirt=2Eengine=2Ecore=2Ebll=2Eaaa=2ELoginUserComman=
d=22=3E
                    =3Clevel name=3D=22DEBUG=22/=3E
            =3C/logger=3E
            =3Clogger
    category=3D=22org=2Eovirt=2Eengine=2Eapi=2Erestapi=2Eresource=2EAbstrac=
tBackendResource=22=3E
                    =3Clevel name=3D=22DEBUG=22/=3E
            =3C/logger=3E


Met vriendelijke groet=2C With kind regards=2C

Jorick Astrego

Netbulae Virtualization Experts=20

----------------

=09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK=
 08198180
 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW=
 NL821234584B01

----------------


--------------040403070801040202060604
Content-Type: text/html;
	charset="windows-1252"
Content-Transfer-Encoding: quoted-printable

=3Chtml=3E
  =3Chead=3E
    =3Cmeta content=3D=22text/html=3B charset=3Dwindows-1252=22
      http-equiv=3D=22Content-Type=22=3E
  =3C/head=3E
  =3Cbody bgcolor=3D=22=23FFFFFF=22 text=3D=22=23000000=22=3E
    =3Cbr=3E
    =3Cbr=3E
    =3Cdiv class=3D=22moz-cite-prefix=22=3EOn 10/26/2015 03=3A14 PM=2C Jori=
ck Astrego
      wrote=3A=3Cbr=3E
    =3C/div=3E
    =3Cblockquote cite=3D=22mid=3A562E355D=2E4030201=40netbulae=2Eeu=22 typ=
e=3D=22cite=22=3E
      =3Cmeta content=3D=22text/html=3B charset=3Dwindows-1252=22
        http-equiv=3D=22Content-Type=22=3E
      =3Cbr=3E
      =3Cbr=3E
      =3Cdiv class=3D=22moz-cite-prefix=22=3EOn 10/26/2015 02=3A57 PM=2C On=
dra
        Machacek wrote=3A=3Cbr=3E
      =3C/div=3E
      =3Cblockquote cite=3D=22mid=3A562E3143=2E4010600=40redhat=2Ecom=22 ty=
pe=3D=22cite=22=3E
        =3Cmeta content=3D=22text/html=3B charset=3Dwindows-1252=22
          http-equiv=3D=22Content-Type=22=3E
        =3Cbr=3E
        =3Cbr=3E
        =3Cdiv class=3D=22moz-cite-prefix=22=3EOn 10/26/2015 02=3A53 PM=2C=
 Jorick
          Astrego wrote=3A=3Cbr=3E
        =3C/div=3E
        =3Cblockquote cite=3D=22mid=3A562E3075=2E5050203=40netbulae=2Eeu=22=
 type=3D=22cite=22=3E
          =3Cmeta http-equiv=3D=22content-type=22 content=3D=22text/html=3B=

            charset=3Dwindows-1252=22=3E
          Hi=2C=3Cbr=3E
          =3Cbr=3E
          Currently I=27m trying to add an ovirt compute resource in
          forman that is limited to the VM=27s of the user=2E =3Cbr=3E
          =3Cbr=3E
          When I give this user the PowerUser role=2C I cannot access the=

          api=3A=3Cbr=3E
          =3Cbr=3E
          =3Cblockquote=3Equery execution failed due to insufficient
            permissions=3Cbr=3E
          =3C/blockquote=3E
        =3C/blockquote=3E
        =3Cbr=3E
        Are you sending header =27Filter=3A true=27 with the request =3F=3C=
br=3E
        If your user is not admin=28PowerUserRole is not admin role=29=2C=
=3Cbr=3E
        you have to use this header=2E=3Cbr=3E
        =3Cbr=3E
        =3Cbr=3E
      =3C/blockquote=3E
      =3Cbr=3E
    =3C/blockquote=3E
    =3Cbr=3E
    Hmm=2C not much response on foreman-users=2E=2E =3Cbr=3E
    =3Cbr=3E
    I checked the code of fog in my foreman install =28
    /opt/rh/ruby193/root/usr/share/gems/gems/fog-1=2E32=2E0/lib/fog/ovirt/c=
ompute=2Erb
    =29 and it appears to have the correct option merged=3A=3Cbr=3E
    =3Cbr=3E
    =3Cblockquote=3E=A0=A0=A0=A0=A0=A0=A0=A0=A0 connection=5Fopts=5B=3Afilt=
ered=5Fapi=5D=A0 =3D
      options=5B=3Aovirt=5Ffiltered=5Fapi=5D=3Cbr=3E
      =3Cbr=3E
      =3Cbr=3E
    =3C/blockquote=3E
    But I don=27t know what url the foreman actually generates=2C is there=

    any way to capture the login string=3F I tried setting some DEBUG
    logging but don=27t get the output I=27m looking for=2E=3Cbr=3E
    =3Cbr=3E
    =3Cblockquote=3E=A0=A0=A0=A0=A0=A0=A0 =26lt=3Blogger
      category=3D=22org=2Eovirt=2Eengine=2Ecore=2Ebll=2ESearchQuery=22=26gt=
=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =26lt=3Blevel name=3D=
=22DEBUG=22/=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0 =26lt=3B/logger=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0 =26lt=3Blogger
      category=3D=22org=2Eovirt=2Eengine=2Ecore=2Ebll=2Eaaa=2ELoginUserComm=
and=22=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =26lt=3Blevel name=3D=
=22DEBUG=22/=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0 =26lt=3B/logger=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0 =26lt=3Blogger
category=3D=22org=2Eovirt=2Eengine=2Eapi=2Erestapi=2Eresource=2EAbstractBac=
kendResource=22=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 =26lt=3Blevel name=3D=
=22DEBUG=22/=26gt=3B=3Cbr=3E
      =A0=A0=A0=A0=A0=A0=A0 =26lt=3B/logger=26gt=3B=3Cbr=3E
      =3Cbr=3E
    =3C/blockquote=3E
    =3Cbr=3E
    =3Cblockquote=3E=3Cbr=3E
      =3Cbr=3E
    =3C/blockquote=3E
 =20=
=3CBR /=3E
=3CBR /=3E
=3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cbr=3E=3Cspan styl=
e=3D=22color=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan sty=
le=3D=22mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelij=
ke groet=2C With kind regards=2C=3Cbr=3E=3Cbr=3EJorick Astrego=3Cbr=3E=3C/s=
pan=3E=3C/font=3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=
Netbulae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3An=
one=3Bborder-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 52=
2px=22=3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A=
 10px=22=3ETel=3A  053 20 30 270=3C/td=3E    =3Ctd style=3D=22width=3A 130p=
x=3Bfont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E    =3Ctd style=3D=
=22width=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E   =20=
=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=
=3E=3C/tr=3E=3Ctr=3E    =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=
=22=3EFax=3A 053 20 30 271=3C/td=3E    =3Ctd style=3D=22width=3A 130px=3Bfo=
nt-size=3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E    =3Ctd style=3D=22width=
=3A 130px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E    =3Ctd style=
=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=
=3C/tr=3E=3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bb=
order-top=3A1px solid =23ccc=3B=22=3E=3CBR /=3E
=3C/body=3E
=3C/html=3E


--------------040403070801040202060604--