[ovirt-devel] Permission issues when trying to migrate vm through the api (ovirt system tests)

[David Caro]

Hi everyone!


I'm having some issues when trying to run the ovirt system tests from ovirt
master branch, and I need some help from you guys.

The issue is that when trying to migrate a vm through the api, I get the error:

  RequestError: 
  status: 400
  reason: Bad Request
  detail: User is not authorized to perform this action.


That does not happen when doing the same through the ui, the vm is migrated
correctly.

The engine logs don't add much more details:

2016-04-18 06:04:15,393 INFO  [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) [29237280] No permission found for user '0000001a-001a-001a-001a-0000000002dd' or one of the groups he is member of, when running action 'MigrateVmToServer', Required permissions are: Action type: 'USER' Action group: 'CREATE_VM' Object type: 'Cluster'  Object ID: 'null'.
2016-04-18 06:04:15,393 WARN  [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15) [29237280] Validation of action 'MigrateVmToServer' failed for user admin at internal-authz. Reasons: VAR__ACTION__MIGRATE,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
2016-04-18 06:04:15,413 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-15) [] Operation Failed: [User is not authorized to perform this action.]


Something that looks odd to me too, is that in the roles, when you edit the
'SuperUser' role (the one the admin user belongs to) there there's one
permission missing, the 'VM->Provisioning Operations->Create Instance', and
can't be added (it's greyed out), not sure if it's related though, I can pass
you a screenshot if you want.


I can give you access to an environment where that happens and more
details/logs/etc if you want to look deeper into it.


Thanks!


-- 
David Caro

Red Hat S.L.
Continuous Integration Engineer - EMEA ENG Virtualization R&D

Tel.: +420 532 294 605
Email: dcaro at redhat.com
IRC: dcaro|dcaroest@{freenode|oftc|redhat}
Web: www.redhat.com
RHT Global #: 82-62605
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://lists.ovirt.org/pipermail/devel/attachments/20160418/b89ebd9b/attachment-0001.sig>