Re: [ovirt-users] OVirt API question
On 07/25/2016 08:43 AM, Костя Климук wrote:
Hello, OVirt community!
I have some problems in understanding with OVirt (v 3.6.0) API.
I'm trying to create user with specifying his roles, by using such
signature in POST call:
<user>
<user_name>testuser@saml-auth</user_name>
<roles>
<role id="some_role_id1"/>
<role id="some_role_id2"/>
<role id="some_role_id3"/>
</roles>
</user>
The user is created but without the roles.
The next issues, that I encountered is associated with updating of
existing user (adding the roles to him). I am trying to do PUT call on
.../ovirt-engine/api/users/long_user_id/roles :
<role id="some_role_id1"/>
But this doesn't work.
Please, give we insight in what I am doing wrong.
In order to do this you first need to add the user, as you did, but
without the roles (if you include then they will just be ignored):
POST /ovirt-engine/api/users
<user>
<user_name>testuser@saml-auth</user_name>
</user>
This will return you the added user, including the an identifier:
<user id="the_user_id" href="...">
...
</user>
But you can't directly add role to an user, because there isn't really a
direct relationship between users and roles. Instead you need to add
"permissions", and each permission is composed of an user, a role and an
object. For example, if you want to add to that user the role
"ClusterAdmin" role for a specific cluster:
POST /ovirt-engine/api/users/the_user_id/permissions
<permission>
<role id="the_role_id"/>
<cluster id="the_cluster_id"/>
</permission>
Alternatively, you can also add the permission using the collection of
the object. For example:
POST /ovirt-engine/api/clusters/the_cluster_id/permissions
<permission>
<role id="the_role_id"/>
<user id="the_user_id"/>
</permission>
The /users/the_user_id/roles has a rather strange meaning, it displays
(read only) the roles of the permissions corresponding to the "system"
object. You should probably avoid it completely, and we should probably
remove it.
--
Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
3ºD, 28016 Madrid, Spain
Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.