It sounds line you're adding the permissions to ovirt through the "Users" tab on the top right. Thats the same thing I did at first. However, the user's tab is not where you manage all settings for users. Its a bit counterintuitive. When you add a user in that tab, it adds them to the "system" object and not to a particular VM or pool which is why the user has more than desired permissions. What you need to do is remove the users or groups from the "Users" tab and add them to the specific pool or VM by selecting the pool, then select the "permissions" sub-tab and then select "add". This will grant the permissions to only that specific resource.
On 06/06/2014 05:52 AM, Artur Sarkisyan wrote:
Thanks for replay, I have an IPA server for authentication. I am trying
some scenarios, but I would like to setup pools of vm's for users,
actually one pool for one user.
why one pool for one user?
a pool allows you to give multiple users access to it, and, specify how many VMs each user can get from the pool.
Kind regards,
Artur
On Thu, Jun 5, 2014 at 8:30 PM, Jeff Clay <jeffclay@gmail.com
<mailto:jeffclay@gmail.com>> wrote:
Yes, I have resolved this issue. It was due to my lack of
understanding in how Ovirt expected things to be configured and
setup. Are you using active directory for authentication and setting
up pools of vm's for users to access?
On Thu, Jun 5, 2014 at 1:10 PM, Artur Sarkisyan <s.artur@gmail.com
<mailto:s.artur@gmail.com>> wrote:
Hi Jeff,
I would like to know if you have resolved this issue?
At this moment i'm building a poc and i have the same problem
like yours:
All users can see all vm's. Do you have some suggestions for me ?
Thanks in advanced.
Kind regards,
Artur
On Tue, May 6, 2014 at 10:32 PM, Jeff Clay <jeffclay@gmail.com
<mailto:jeffclay@gmail.com>> wrote:
For some reason, when logged in as a user with a modifed
copy role of
UserRole (only has login permssion and VM -> Basic
Operations -> Remote Log
In permission) the user can see all of the VM's and has the
ability to open
a console, start, shutdown or suspend any of the VM's. I
have verified that
all of the VM's only show the SuperUser role in their
permissions. I went
through all of the roles and verified that the user is only
a member of the
Copy_of_UserRole. The only thing I can think of is that the
user is
inheriting permissions from something, but I can't find what
it is or
where. Any suggestions?
Thanks.
_______________________________________________
Users mailing list
Users@ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users