Hi,

When I try to add an external event to ovirt using curl, I get permission issue:

$ curl  -X POST --insecure -u admin@internal:abc123 -H "Content-Type: application/json" https://192.168.3.226/ovirt-engine/api/events --data '{"origin":"thirdParty","severity":"normal","custom_id":"123","description":"hello external event."}'

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<fault>

    <reason>Operation Failed</reason>

    <detail>[User is not authorized to perform this action.]</detail>

</fault>

The engine.log says:

2014-12-11 14:52:33,725 INFO  [org.ovirt.engine.core.bll.aaa.LoginUserCommand] (ajp--127.0.0.1-8702-7) Running command: LoginUserCommand internal: false.

2014-12-11 14:52:33,732 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-7) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User admin logged in.

2014-12-11 14:52:33,750 INFO  [org.ovirt.engine.core.bll.AddExternalEventCommand] (ajp--127.0.0.1-8702-7) [6947ffae] No permission found for user fdfc627c-d875-11e0-90f0-83df133b58cc or one of the groups he is member of, when running action AddExternalEvent, Required permissions are: Action type: ADMIN Action group: INJECT_EXTERNAL_EVENTS Object type: System  Object ID: aaa00000-0000-0000-0000-123456789aaa.

2014-12-11 14:52:33,751 WARN  [org.ovirt.engine.core.bll.AddExternalEventCommand] (ajp--127.0.0.1-8702-7) [6947ffae] CanDoAction of action AddExternalEvent failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION

2014-12-11 14:52:33,765 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (ajp--127.0.0.1-8702-7) Operation Failed: [User is not authorized to perform this action.]

2014-12-11 14:52:33,779 INFO  [org.ovirt.engine.core.bll.aaa.LogoutBySessionCommand] (ajp--127.0.0.1-8702-7) [21c639e1] Running command: LogoutBySessionCommand internal: false.

2014-12-11 14:52:33,780 INFO  [org.ovirt.engine.core.bll.aaa.LogoutUserCommand] (ajp--127.0.0.1-8702-7) [6de8f467] Running command: LogoutUserCommand internal: false.

2014-12-11 14:52:33,790 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-7) [6de8f467] Correlation ID: 6de8f467, Call Stack: null, Custom Event ID: -1, Message: User admin logged out.

Is this the expected behavior? Or is there anything i missed? 

thanks