Re: [ovirt-users] api access with poweruser role

26 Oct 2015


      This is a multi-part message in MIME format.
--------------080300010909040801050005
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit


On 10/26/2015 02:53 PM, Jorick Astrego wrote:
...
Hi,
Currently I'm trying to add an ovirt compute resource in forman that 
is limited to the VM's of the user.
When I give this user the PowerUser role, I cannot access the api:
query execution failed due to insufficient permissions
Are you sending header 'Filter: true' with the request ?
If your user is not admin(PowerUserRole is not admin role),
you have to use this header.
...
When I give this user the SuperUser role, I can access the api. But I 
can see all the VM's of all users.
How can I grant api access so the user can deploy through forman 
without giving access to all the vm's in our oVirt environment?
Kind regards,
Jorick
Met vriendelijke groet, With kind regards,
Jorick Astrego
*
Netbulae Virtualization Experts *
------------------------------------------------------------------------
Tel: 053 20 30 270 	info@netbulae.eu 	Staalsteden 4-3A 	KvK 08198180
Fax: 053 20 30 271 	www.netbulae.eu 	7547 TA Enschede 	BTW NL821234584B01
------------------------------------------------------------------------
_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--------------080300010909040801050005
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <br>
    <div class="moz-cite-prefix">On 10/26/2015 02:53 PM, Jorick Astrego
      wrote:<br>
    </div>
    <blockquote cite="mid:562E3075.5050203@netbulae.eu" type="cite">
      <meta http-equiv="content-type" content="text/html;
        charset=windows-1252">
      Hi,<br>
      <br>
      Currently I'm trying to add an ovirt compute resource in forman
      that is limited to the VM's of the user. <br>
      <br>
      When I give this user the PowerUser role, I cannot access the api:<br>
      <br>
      <blockquote>query execution failed due to insufficient permissions<br>
      </blockquote>
    </blockquote>
    <br>
    Are you sending header 'Filter: true' with the request ?<br>
    If your user is not admin(PowerUserRole is not admin role),<br>
    you have to use this header.<br>
    <br>
    <blockquote cite="mid:562E3075.5050203@netbulae.eu" type="cite">
      <blockquote> <br>
      </blockquote>
      When I give this user the SuperUser role, I can access the api.
      But I can see all the VM's of all users.<br>
      <br>
      How can I grant api access so the user can deploy through forman
      without giving access to all the vm's in our oVirt environment?<br>
      <br>
      Kind regards,<br>
      <br>
      Jorick<br>
      <br>
      <br>
      <br>
      <br>
      <span style="color:#604c78;"><font color="000000"><span
            style="mso-fareast-language:en-gb;" lang="NL">Met
            vriendelijke groet, With kind regards,<br>
            <br>
            Jorick Astrego<br>
          </span></font></span><b style="color:#604c78"><br>
        Netbulae Virtualization Experts </b><br>
      <hr style="border:none;border-top:1px solid #ccc;">
      <table style="width: 522px">
        <tbody>
          <tr>
            <td style="width: 130px;font-size: 10px">Tel: 053 20 30 270</td>
            <td style="width: 130px;font-size: 10px"><a class="moz-txt-link-abbreviated" href="mailto:info@netbulae.eu">info@netbulae.eu</a></td>
            <td style="width: 130px;font-size: 10px">Staalsteden 4-3A</td>
            <td style="width: 130px;font-size: 10px">KvK 08198180</td>
          </tr>
          <tr>
            <td style="width: 130px;font-size: 10px">Fax: 053 20 30 271</td>
            <td style="width: 130px;font-size: 10px"><a class="moz-txt-link-abbreviated" href="http://www.netbulae.eu">www.netbulae.eu</a></td>
            <td style="width: 130px;font-size: 10px">7547 TA Enschede</td>
            <td style="width: 130px;font-size: 10px">BTW NL821234584B01</td>
          </tr>
        </tbody>
      </table>
      <br>
      <hr style="border:none;border-top:1px solid #ccc;"><br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------080300010909040801050005--

Re: [ovirt-users] api access with poweruser role

Ondra Machacek