Hi Karli, - granted VmCreator roll to my_user on dc_a - both with blank vm and from a template - with permissions on group instead of user directly. still same results thanks ofri ----- Original Message -----
From: "Karli Sjöberg" <Karli.Sjoberg@slu.se> To: "Ofri Masad" <omasad@redhat.com> Cc: users@ovirt.org Sent: Monday, August 19, 2013 2:34:59 PM Subject: Re: [Users] oVirt-3.2 users creating snapshots fail
mån 2013-08-19 klockan 07:28 -0400 skrev Ofri Masad:
Hi Karli
I've tried to reproduce this bug in 3.2 but couldn't.
Here is what I did. tell me where you did something different. - created a DC called dc_a - granted VmCreator roll to my_user
Granted where? System? DC?
- added a quota called quota_a to dc_a (unlimited resources for cpu, memory and storage). quota covers all clusters and all storage domains. - added my_user as a consumer of quota_a
logged on to user portal as my_user: - created a new VM (consuming quota_a)
Was the new VM blank, from a template, or both?
- added a disk to the VM (consuming quota_a) - created snapshot from that vm
everything looks ok. the snapshot was created
What I did different was to grant VmCreator to my_group (where my_user is member). And then added my_group as consumer of quota. Please try that and see if it still works.
/Karli
thanks ofri
----- Original Message -----
From: "Karli Sjöberg" <Karli.Sjoberg@slu.se<mailto:Karli.Sjoberg@slu.se>> To: "Ofri Masad" <omasad@redhat.com<mailto:omasad@redhat.com>> Cc: users@ovirt.org<mailto:users@ovirt.org> Sent: Monday, August 19, 2013 8:26:06 AM Subject: Re: [Users] oVirt-3.2 users creating snapshots fail
sön 2013-08-18 klockan 03:01 -0400 skrev Ofri Masad:
Hi Karli,
First of all, thank you for your feedback. I am not quite sure the thread you are referring to is relevant to the bug you are witnessing.
The bug in the thread was fixed only in 3.3 because it was only introduced in 3.3 (the behavior may be the same). anyway, I will try to reproduce your bug.
meanwhile, try to verify the following: - a storage quota exist which apply to the SD that the VM disks are located on. - the user is defined a consumer of that quota - the disks of the VM are consuming that quota
Yes, yes and yes:) Still won´t let anyone snapshot.
No one can snapshot even if I assign to an unlimited quota, as long as it´s active(tried both audit and enforcing), no one is allowed to snapshot:(
when creating a snapshot the user is consuming quota (the same quota the disk is consuming). so, if the user does not have consumer permission for that quota, he cannot create a snapshot.
thanks Ofri
----- Original Message -----
From: "Karli Sjöberg" <Karli.Sjoberg@slu.se<mailto:Karli.Sjoberg@slu.se><mailto:Karli.Sjoberg@slu.se>> To: users@ovirt.org<mailto:users@ovirt.org><mailto:users@ovirt.org> Sent: Wednesday, August 14, 2013 4:25:50 PM Subject: Re: [Users] oVirt-3.2 users creating snapshots fail
Well, well, looki here, the issue is reported by at least two more users: http://lists.ovirt.org/pipermail/users/2013-June/014813.html
Reported fixed already for 3.3... Whereas I´ve just been able to upgrade to 3.2 after five months of bang-head-against-wall:ing:(
I would very much like to see an oVirt-3.2.3 that includes this fix for Quotas, because sure enough just disabling quota made users able to take snapshots again, when quotas are something we plan on using quite heavily.
/Karli
ons 2013-08-14 klockan 12:45 +0000 skrev Karli Sjöberg:
Hi!
After upgrading from oVirt-3.1 to oVirt-3.2, users´s ability to create snapshots has disappeared. The only way to give users permission to take snapshots that I´ve found so far is to give them "DataCenterAdmin" or "Super User" in either System or DataCenter, and any other given Role is met by this lonely line in engine.log: 2013-08-14 14:27:01,106 WARN [org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand] (ajp--127.0.0.1-8702-19) CanDoAction of action CreateAllSnapshotsFromVm failed. Reasons:VAR__ACTION__CREATE,VAR__TYPE__SNAPSHOT,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
I even tried to create an admin Role with everything checked, all permissions granted, but a user or group associated with that Role still couldn´t take snapshots. Only the built-in Admin roles seems to function correctly. How can I start to troubleshoot this issue?
--
Med Vänliga Hälsningar ------------------------------------------------------------------------------- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjoberg@slu.se<mailto:karli.sjoberg@slu.se><mailto:karli.sjoberg@slu.se>
--
Med Vänliga Hälsningar ------------------------------------------------------------------------------- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjoberg@slu.se<mailto:karli.sjoberg@slu.se><mailto:karli.sjoberg@slu.se>
_______________________________________________ Users mailing list Users@ovirt.org<mailto:Users@ovirt.org><mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users
--
Med Vänliga Hälsningar ------------------------------------------------------------------------------- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjoberg@slu.se<mailto:karli.sjoberg@slu.se><mailto:karli.sjoberg@adm.slu.se>
--
Med Vänliga Hälsningar ------------------------------------------------------------------------------- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjoberg@slu.se<mailto:karli.sjoberg@adm.slu.se>