[ovirt-devel] Permission issues when trying to migrate vm through the api (ovirt system tests)

[Michal Skrivanek]

> On 18 Apr 2016, at 12:47, Yaniv Kaul <ykaul at redhat.com> wrote:
> 
> 
> 
> On Mon, Apr 18, 2016 at 1:32 PM, David Caro <dcaro at redhat.com <mailto:dcaro at redhat.com>> wrote:
> 
> Hi everyone!
> 
> 
> I'm having some issues when trying to run the ovirt system tests from ovirt
> master branch, and I need some help from you guys.
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=1328011 <https://bugzilla.redhat.com/show_bug.cgi?id=1328011>
great, lago caught a regression!
patch will be posted soon

> Y.
>  
> 
> The issue is that when trying to migrate a vm through the api, I get the error:
> 
>   RequestError:
>   status: 400
>   reason: Bad Request
>   detail: User is not authorized to perform this action.
> 
> 
> That does not happen when doing the same through the ui, the vm is migrated
> correctly.
> 
> The engine logs don't add much more details:
> 
> 2016-04-18 06:04:15,393 INFO  [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) [29237280] No permission found for user '0000001a-001a-001a-001a-0000000002dd' or one of the groups he is member of, when running action 'MigrateVmToServer', Required permissions are: Action type: 'USER' Action group: 'CREATE_VM' Object type: 'Cluster'  Object ID: 'null'.
> 2016-04-18 06:04:15,393 WARN  [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) [29237280] Validation of action 'MigrateVmToServer' failed for user admin at internal-authz. Reasons: VAR__ACTION__MIGRATE,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
> 2016-04-18 06:04:15,413 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-15) [] Operation Failed: [User is not authorized to perform this action.]
> 
> 
> Something that looks odd to me too, is that in the roles, when you edit the
> 'SuperUser' role (the one the admin user belongs to) there there's one
> permission missing, the 'VM->Provisioning Operations->Create Instance', and
> can't be added (it's greyed out), not sure if it's related though, I can pass
> you a screenshot if you want.
> 
> 
> I can give you access to an environment where that happens and more
> details/logs/etc if you want to look deeper into it.
> 
> 
> Thanks!
> 
> 
> --
> David Caro
> 
> Red Hat S.L.
> Continuous Integration Engineer - EMEA ENG Virtualization R&D
> 
> Tel.: +420 532 294 605 <tel:%2B420%20532%20294%20605>
> Email: dcaro at redhat.com <mailto:dcaro at redhat.com>
> IRC: dcaro|dcaroest@{freenode|oftc|redhat}
> Web: www.redhat.com <http://www.redhat.com/>
> RHT Global #: 82-62605
> 
> _______________________________________________
> Devel mailing list
> Devel at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/devel/attachments/20160418/ffc838b5/attachment.html>