[ovirt-devel] Permission issues when trying to migrate vm through the api (ovirt system tests)

[Yaniv Kaul]

On Mon, Apr 18, 2016 at 1:32 PM, David Caro <dcaro at redhat.com> wrote:

>
> Hi everyone!
>
>
> I'm having some issues when trying to run the ovirt system tests from ovirt
> master branch, and I need some help from you guys.
>

https://bugzilla.redhat.com/show_bug.cgi?id=1328011
Y.


>
> The issue is that when trying to migrate a vm through the api, I get the
> error:
>
>   RequestError:
>   status: 400
>   reason: Bad Request
>   detail: User is not authorized to perform this action.
>
>
> That does not happen when doing the same through the ui, the vm is migrated
> correctly.
>
> The engine logs don't add much more details:
>
> 2016-04-18 06:04:15,393 INFO
> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15)
> [29237280] No permission found for user
> '0000001a-001a-001a-001a-0000000002dd' or one of the groups he is member
> of, when running action 'MigrateVmToServer', Required permissions are:
> Action type: 'USER' Action group: 'CREATE_VM' Object type: 'Cluster'
> Object ID: 'null'.
> 2016-04-18 06:04:15,393 WARN
> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15)
> [29237280] Validation of action 'MigrateVmToServer' failed for user
> admin at internal-authz. Reasons:
> VAR__ACTION__MIGRATE,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
> 2016-04-18 06:04:15,413 ERROR
> [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default
> task-15) [] Operation Failed: [User is not authorized to perform this
> action.]
>
>
> Something that looks odd to me too, is that in the roles, when you edit the
> 'SuperUser' role (the one the admin user belongs to) there there's one
> permission missing, the 'VM->Provisioning Operations->Create Instance', and
> can't be added (it's greyed out), not sure if it's related though, I can
> pass
> you a screenshot if you want.
>
>
> I can give you access to an environment where that happens and more
> details/logs/etc if you want to look deeper into it.
>
>
> Thanks!
>
>
> --
> David Caro
>
> Red Hat S.L.
> Continuous Integration Engineer - EMEA ENG Virtualization R&D
>
> Tel.: +420 532 294 605
> Email: dcaro at redhat.com
> IRC: dcaro|dcaroest@{freenode|oftc|redhat}
> Web: www.redhat.com
> RHT Global #: 82-62605
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/devel/attachments/20160418/134dfbce/attachment-0001.html>