[ovirt-users] Re: Users and VM permissions matrix
On 05/11/2019 11:57, Colin Coe wrote:
Hi all
I've been tasked with creating a matrix of users/groups and VMs so we
can easily see who has access to what (via SPCIE console).
Google has given me a couple of hints but I can get it over the line.
---
users_service = connection.system_service().users_service()
users = users_service.list()
for user in users:
username = user.user_name.split('@')[0]
# Follow the link to the permissions of the user:
perms = connection.follow_link(user.permissions)
for perm in perms:
if perm.vm:
print(username)
permissions_service =
connection.system_service().permissions_service()
Well if you would add here:
print (connections.follow_link(perm.role).name)
you would know the name of the role that user have,
but you wouldn't know for which object this role is
assigned.
What exactly should be the output of your script?
For example:
User1:
VMs:
vm1: UserVmManager
vm2: UserRole
CLusters:
cluster1: UserRole
User2:
VMs:
vm3: UserRole
Group1:
CLusters:
cluster2: UserRole
?
print(perm.vm.id <http://perm.vm.id>)
---
The problem is with permissions, the output from above is:
---
user1
1b645daf-de26-4f33-9e3b-6a12eadd4618
user2
9c79e763-f78d-4bf9-b8ca-20fe197fd80c
user3
f9d00b30-8003-41c3-95a1-10e0c452fa63
user4
1bbadf96-ef95-4ece-b5f3-1fa112aa3571
user5
e9085627-324e-48d3-bc04-52ff7798ddd0
---
I can't work out how to get the actual permissions rather that the ID.
Any ideas?
Thanks
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PILAIVCF7C4...