Ovirt 4.2 Bug with Permissons on the Vm Portal?
--_000_29f4cad202e140c1bb149e33fd16af23DR1XEXCH02Besetcorp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello Guys, i recently upgrade to 4.2 We used the User Portal before. Every User could see his VM=B4s, every Admi= n just could see his VM=B4s ( User View ). After the Update: Admin=B4s can see every VM in VM Portal The Users can=B4t see Vm=B4s anymore. The Portal is Empty. Role "UserVMMana= ger" is set. We tested some Scenarios: If the User create a new Virtual Machine, it is s= hown in the VM Portal. When he log out and in again -> VM is gone in his Vi= ew Admin View: The VM was created, Permission where set. Everything seems to b= e good. Any Ideas? Thanks Guys --_000_29f4cad202e140c1bb149e33fd16af23DR1XEXCH02Besetcorp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0cm; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri",sans-serif;} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Calibri",sans-serif; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-family:"Calibri",sans-serif;} @page WordSection1 {size:612.0pt 792.0pt; margin:72.0pt 72.0pt 72.0pt 72.0pt;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span lang=3D"DE">Hello Guys,<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"DE"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"DE">i recently upgrade to 4.2<o:p></o:= p></span></p> <p class=3D"MsoNormal"><span lang=3D"DE"><o:p> </o:p></span></p> <p class=3D"MsoNormal">We used the User Portal before. Every User could see= his<u> </u> VM=B4s, every Admin just could see his VM=B4s ( User View ).<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">After the Update:<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Admin=B4s can see every VM in VM Portal<o:p></o:p></= p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">The Users can=B4t see Vm=B4s anymore. The Portal is = Empty. Role “UserVMManager” is set.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">We tested some Scenarios: If the User create a new V= irtual Machine, it is shown in the VM Portal. When he log out and in again = -> VM is gone in his View<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Admin View: The VM was created, Permission where set= . Everything seems to be good.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Any Ideas? Thanks Guys<u><o:p></o:p></u></p> </div> </body> </html> --_000_29f4cad202e140c1bb149e33fd16af23DR1XEXCH02Besetcorp_--
</p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Latcho<o:p></o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <div> <div style=3D"border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in"> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"= ;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s= ize:10.0pt;font-family:"Tahoma","sans-serif""> users-bo= unces@ovirt.org [mailto:users-bounces@ovirt.org] <b>On Behalf Of </b>Thomas Fecke<br> <b>Sent:</b> Monday, January 08, 2018 3:17 PM<br> <b>To:</b> users@ovirt.org<br> <b>Subject:</b> [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm Porta= l?<o:p></o:p></span></p> </div> </div> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><span lang=3D"DE">Hello Guys,<o:p></o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"DE"><o:p> </o:p></span></p> <p class=3D"MsoNormal"><span lang=3D"DE">i recently upgrade to 4.2<o:p></o:=
--_000_ec23013f180944f88bc809583ab0a4fcEXMB1aubginlocal_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Guys, The same here. Upgrade 4.1.8 to 4.2. oVirt connected to Active Directory. U= ser cannot see machines in VM portal. Still playing with permissions. Any ideas? Thank you! Best, Latcho From: users-bounces@ovirt.org [mailto:users-bounces@ovirt.org] On Behalf Of= Thomas Fecke Sent: Monday, January 08, 2018 3:17 PM To: users@ovirt.org Subject: [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm Portal? Hello Guys, i recently upgrade to 4.2 We used the User Portal before. Every User could see his VM=B4s, every Admi= n just could see his VM=B4s ( User View ). After the Update: Admin=B4s can see every VM in VM Portal The Users can=B4t see Vm=B4s anymore. The Portal is Empty. Role "UserVMMana= ger" is set. We tested some Scenarios: If the User create a new Virtual Machine, it is s= hown in the VM Portal. When he log out and in again -> VM is gone in his Vi= ew Admin View: The VM was created, Permission where set. Everything seems to b= e good. Any Ideas? Thanks Guys --_000_ec23013f180944f88bc809583ab0a4fcEXMB1aubginlocal_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:windowtext;} span.EmailStyle18 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Hi Guys,<o:p></o:p></s= pan></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">The same here. Upgrade= 4.1.8 to 4.2. oVirt connected to Active Directory. User cannot see machine= s in VM portal. Still playing with permissions.<o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Any ideas?<o:p></o:p><= /span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D"><o:p> </o:p></spa= n></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Thank you!<o:p></o:p><= /span></p> <p class=3D"MsoNormal"><span style=3D"color:#1F497D">Best,<o:p></o:p></span= p></span></p> <p class=3D"MsoNormal"><span lang=3D"DE"><o:p> </o:p></span></p> <p class=3D"MsoNormal">We used the User Portal before. Every User could see= his<u> </u> VM=B4s, every Admin just could see his VM=B4s ( User View ).<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">After the Update:<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Admin=B4s can see every VM in VM Portal<o:p></o:p></= p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">The Users can=B4t see Vm=B4s anymore. The Portal is = Empty. Role “UserVMManager” is set.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">We tested some Scenarios: If the User create a new V= irtual Machine, it is shown in the VM Portal. When he log out and in again = -> VM is gone in his View<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Admin View: The VM was created, Permission where set= . Everything seems to be good.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">Any Ideas? Thanks Guys<u><o:p></o:p></u></p> </div> </body> </html> --_000_ec23013f180944f88bc809583ab0a4fcEXMB1aubginlocal_--
It's the same for me also. Ovirt is connected to FreeIPA this time, so it seems not to be bound to a specific AAA engine extension. Do we have to submit a new bug on bugzilla?? Regards On 01/11/2018 02:04 PM, Latchezar Filtchev wrote:
Hi Guys,
The same here. Upgrade 4.1.8 to 4.2. oVirt connected to Active Directory. User cannot see machines in VM portal. Still playing with permissions.
Any ideas?
Thank you!
Best,
Latcho
*From:*users-bounces@ovirt.org [mailto:users-bounces@ovirt.org] *On Behalf Of *Thomas Fecke *Sent:* Monday, January 08, 2018 3:17 PM *To:* users@ovirt.org *Subject:* [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm Portal?
Hello Guys,
i recently upgrade to 4.2
We used the User Portal before. Every User could see his__ VM´s, every Admin just could see his VM´s ( User View ).
After the Update:
Admin´s can see every VM in VM Portal
The Users can´t see Vm´s anymore. The Portal is Empty. Role “UserVMManager” is set.
We tested some Scenarios: If the User create a new Virtual Machine, it is shown in the VM Portal. When he log out and in again -> VM is gone in his View
Admin View: The VM was created, Permission where set. Everything seems to be good.
Any Ideas? Thanks Guys__
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- gb PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34
--Apple-Mail=_A20C47FE-15EF-4833-8B0B-9452BC81EFEF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8
On 12 Jan 2018, at 12:27, Giorgio Biacchi <giorgio@di.unimi.it> wrote: =20 It's the same for me also. =20 Ovirt is connected to FreeIPA this time, so it seems not to be bound = to a specific AAA engine extension. =20 Do we have to submit a new bug on bugzilla??
=20 Regards =20 On 01/11/2018 02:04 PM, Latchezar Filtchev wrote:
Hi Guys, The same here. Upgrade 4.1.8 to 4.2. oVirt connected to Active = Directory. User cannot see machines in VM portal. Still playing with =
Looks like https://github.com/oVirt/ovirt-web-ui/issues/460 = <https://github.com/oVirt/ovirt-web-ui/issues/460> ? Somehow it diappeared in recent 4.2.1 builds, can you check that by any = chance on your setup too? Thanks, michal permissions.
Any ideas? Thank you! Best, Latcho *From:*users-bounces@ovirt.org [mailto:users-bounces@ovirt.org] *On = Behalf Of *Thomas Fecke *Sent:* Monday, January 08, 2018 3:17 PM *To:* users@ovirt.org *Subject:* [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm = Portal? Hello Guys, i recently upgrade to 4.2 We used the User Portal before. Every User could see his__ VM=C2=B4s, = every Admin just could see his VM=C2=B4s ( User View ). After the Update: Admin=C2=B4s can see every VM in VM Portal The Users can=C2=B4t see Vm=C2=B4s anymore. The Portal is Empty. Role = =E2=80=9CUserVMManager=E2=80=9D is set. We tested some Scenarios: If the User create a new Virtual Machine, = it is shown in the VM Portal. When he log out and in again -> VM is gone = in his View Admin View: The VM was created, Permission where set. Everything = seems to be good. Any Ideas? Thanks Guys__ _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users =20 --=20 gb =20 PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB = 0F34
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users =20 =20
--Apple-Mail=_A20C47FE-15EF-4833-8B0B-9452BC81EFEF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;" class=3D""><br = class=3D""><div><br class=3D""><blockquote type=3D"cite" class=3D""><div = class=3D"">On 12 Jan 2018, at 12:27, Giorgio Biacchi <<a = href=3D"mailto:giorgio@di.unimi.it" class=3D"">giorgio@di.unimi.it</a>>= wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div = class=3D"">It's the same for me also.<br class=3D""><br class=3D"">Ovirt = is connected to FreeIPA this time, so it seems not to be bound to a = specific AAA engine extension.<br class=3D""><br class=3D"">Do we have = to submit a new bug on bugzilla??<br = class=3D""></div></div></blockquote><div><br class=3D""></div>Looks = like <a href=3D"https://github.com/oVirt/ovirt-web-ui/issues/460" = class=3D"">https://github.com/oVirt/ovirt-web-ui/issues/460</a> ?</di= v><div>Somehow it diappeared in recent 4.2.1 builds, can you check that = by any chance on your setup too?</div><div><br = class=3D""></div><div>Thanks,</div><div>michal</div><div><br = class=3D""><blockquote type=3D"cite" class=3D""><div class=3D""><div = class=3D""><br class=3D"">Regards<br class=3D""><br class=3D"">On = 01/11/2018 02:04 PM, Latchezar Filtchev wrote:<br class=3D""><blockquote = type=3D"cite" class=3D"">Hi Guys,<br class=3D"">The same here. Upgrade = 4.1.8 to 4.2. oVirt connected to Active Directory. User cannot see = machines in VM portal. Still playing with permissions.<br class=3D"">Any = ideas?<br class=3D"">Thank you!<br class=3D"">Best,<br = class=3D"">Latcho<br class=3D"">*From:*<a = href=3D"mailto:users-bounces@ovirt.org" = class=3D"">users-bounces@ovirt.org</a> [<a = href=3D"mailto:users-bounces@ovirt.org" = class=3D"">mailto:users-bounces@ovirt.org</a>] *On Behalf Of *Thomas = Fecke<br class=3D"">*Sent:* Monday, January 08, 2018 3:17 PM<br = class=3D"">*To:* <a href=3D"mailto:users@ovirt.org" = class=3D"">users@ovirt.org</a><br class=3D"">*Subject:* [ovirt-users] = Ovirt 4.2 Bug with Permissons on the Vm Portal?<br class=3D"">Hello = Guys,<br class=3D"">i recently upgrade to 4.2<br class=3D"">We used the = User Portal before. Every User could see his__ VM=C2=B4s, every Admin = just could see his VM=C2=B4s ( User View ).<br class=3D"">After the = Update:<br class=3D"">Admin=C2=B4s can see every VM in VM Portal<br = class=3D"">The Users can=C2=B4t see Vm=C2=B4s anymore. The Portal is = Empty. Role =E2=80=9CUserVMManager=E2=80=9D is set.<br class=3D"">We = tested some Scenarios: If the User create a new Virtual Machine, it is = shown in the VM Portal. When he log out and in again -> VM is gone in = his View<br class=3D"">Admin View: The VM was created, Permission where = set. Everything seems to be good.<br class=3D"">Any Ideas? Thanks = Guys__<br class=3D"">_______________________________________________<br = class=3D"">Users mailing list<br class=3D""><a = href=3D"mailto:Users@ovirt.org" class=3D"">Users@ovirt.org</a><br = class=3D"">http://lists.ovirt.org/mailman/listinfo/users<br = class=3D""></blockquote><br class=3D"">-- <br class=3D"">gb<br = class=3D""><br class=3D"">PGP Key: <a href=3D"http://pgp.mit.edu/" = class=3D"">http://pgp.mit.edu/</a><br class=3D"">Primary key = fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34<br = class=3D"">_______________________________________________<br = class=3D"">Users mailing list<br class=3D""><a = href=3D"mailto:Users@ovirt.org" class=3D"">Users@ovirt.org</a><br = class=3D"">http://lists.ovirt.org/mailman/listinfo/users<br class=3D""><br= class=3D""><br class=3D""></div></div></blockquote></div><br = class=3D""></body></html>= --Apple-Mail=_A20C47FE-15EF-4833-8B0B-9452BC81EFEF--
On 01/12/2018 05:53 PM, Michal Skrivanek wrote:
On 12 Jan 2018, at 12:27, Giorgio Biacchi <giorgio@di.unimi.it <mailto:giorgio@di.unimi.it>> wrote:
It's the same for me also.
Ovirt is connected to FreeIPA this time, so it seems not to be bound to a specific AAA engine extension.
Do we have to submit a new bug on bugzilla??
Looks like https://github.com/oVirt/ovirt-web-ui/issues/460 ? Somehow it diappeared in recent 4.2.1 builds, can you check that by any chance on your setup too?
I just enabled Ovirt Release Pre repo and updated to 4.2.1.1-1.el7 but the problem still is present. I've done a test, as a user I created a Vm, the Vm is visible from Vm Portal. From the admin portal I removed the UserVmManager permission on that Vm. From the Vm Portal the Vm go away. So far so good. Then I re added the previously removed permission to the Vm but the Vm do not appears in the Vm portal once I log back in as a normal user. Thanks
Thanks, michal
Regards
On 01/11/2018 02:04 PM, Latchezar Filtchev wrote:
Hi Guys, The same here. Upgrade 4.1.8 to 4.2. oVirt connected to Active Directory. User cannot see machines in VM portal. Still playing with permissions. Any ideas? Thank you! Best, Latcho *From:*users-bounces@ovirt.org <mailto:users-bounces@ovirt.org> [mailto:users-bounces@ovirt.org] *On Behalf Of *Thomas Fecke *Sent:* Monday, January 08, 2018 3:17 PM *To:* users@ovirt.org <mailto:users@ovirt.org> *Subject:* [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm Portal? Hello Guys, i recently upgrade to 4.2 We used the User Portal before. Every User could see his__ VM´s, every Admin just could see his VM´s ( User View ). After the Update: Admin´s can see every VM in VM Portal The Users can´t see Vm´s anymore. The Portal is Empty. Role “UserVMManager” is set. We tested some Scenarios: If the User create a new Virtual Machine, it is shown in the VM Portal. When he log out and in again -> VM is gone in his View Admin View: The VM was created, Permission where set. Everything seems to be good. Any Ideas? Thanks Guys__ _______________________________________________ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users
-- gb
PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34 _______________________________________________ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users
-- gb PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34
Dear oVirt-ers, Here are my steps to upgrade oVirt 4.1.8 (Active Directory connected) to 4.2 and results: 1. oVirt 4.1.8 (This version is reached by several upgrades starting from oVirt 3.6) - engine - dedicated machine - Data center A/2 clusters - Cluster 1/2 virtualization hosts - cluster 2/1 virtualization host. Data center is used only by 1 Active Directory user - this user is not SuperUser and can create and manage virtual machines; - Data center B /1 cluster - Cluster 1/2 virtualization hosts. Data center is used by several Active directory users (Non SuperUser) - every user can create virtual machines. User can see only own machines in VM portal. 2. oVirt 4.2 - observation after upgrade: - Virtual machines disappeared in VM portal. All virtual machines are visible in Admin portal. Granting SuperUser role to particular user brings back all virtual machines in VM portal and every user can see all virtual machines. After removing SuperUser role - virtual machines are not visible in VM portal. I still cannot find permissions combination so every user can see only own machines. I found quite inconvenient in my use case scenario to discontinue adding disk to newly created virtual machine in VM portal. 3. oVirt 4.2.1 - pre release - pretty much the same behavior. Any comment or advice will be appreciated. Thank you! Best, Latcho -----Original Message----- From: users-bounces@ovirt.org [mailto:users-bounces@ovirt.org] On Behalf Of Giorgio Biacchi Sent: Wednesday, January 17, 2018 2:33 PM To: Michal Skrivanek Cc: users@ovirt.org Subject: Re: [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm Portal? On 01/12/2018 05:53 PM, Michal Skrivanek wrote:
On 12 Jan 2018, at 12:27, Giorgio Biacchi <giorgio@di.unimi.it <mailto:giorgio@di.unimi.it>> wrote:
It's the same for me also.
Ovirt is connected to FreeIPA this time, so it seems not to be bound to a specific AAA engine extension.
Do we have to submit a new bug on bugzilla??
Looks like https://github.com/oVirt/ovirt-web-ui/issues/460 ? Somehow it diappeared in recent 4.2.1 builds, can you check that by any chance on your setup too?
I just enabled Ovirt Release Pre repo and updated to 4.2.1.1-1.el7 but the problem still is present. I've done a test, as a user I created a Vm, the Vm is visible from Vm Portal. From the admin portal I removed the UserVmManager permission on that Vm. From the Vm Portal the Vm go away. So far so good. Then I re added the previously removed permission to the Vm but the Vm do not appears in the Vm portal once I log back in as a normal user. Thanks
Thanks, michal
Regards
On 01/11/2018 02:04 PM, Latchezar Filtchev wrote:
Hi Guys, The same here. Upgrade 4.1.8 to 4.2. oVirt connected to Active Directory. User cannot see machines in VM portal. Still playing with permissions. Any ideas? Thank you! Best, Latcho *From:*users-bounces@ovirt.org <mailto:users-bounces@ovirt.org> [mailto:users-bounces@ovirt.org] *On Behalf Of *Thomas Fecke *Sent:* Monday, January 08, 2018 3:17 PM *To:* users@ovirt.org <mailto:users@ovirt.org> *Subject:* [ovirt-users] Ovirt 4.2 Bug with Permissons on the Vm Portal? Hello Guys, i recently upgrade to 4.2 We used the User Portal before. Every User could see his__ VM´s, every Admin just could see his VM´s ( User View ). After the Update: Admin´s can see every VM in VM Portal The Users can´t see Vm´s anymore. The Portal is Empty. Role “UserVMManager” is set. We tested some Scenarios: If the User create a new Virtual Machine, it is shown in the VM Portal. When he log out and in again -> VM is gone in his View Admin View: The VM was created, Permission where set. Everything seems to be good. Any Ideas? Thanks Guys__ _______________________________________________ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users
-- gb
PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34 _______________________________________________ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users
-- gb PGP Key: http://pgp.mit.edu/ Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34 _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (4)
-
Giorgio Biacchi -
Latchezar Filtchev -
Michal Skrivanek -
Thomas Fecke