[ovirt-devel] Permission issues when trying to migrate vm through the api (ovirt system tests)

[Oved Ourfali]

On Mon, Apr 18, 2016 at 2:51 PM, Michal Skrivanek <
michal.skrivanek at redhat.com> wrote:

>
> On 18 Apr 2016, at 12:47, Yaniv Kaul <ykaul at redhat.com> wrote:
>
>
>
> On Mon, Apr 18, 2016 at 1:32 PM, David Caro <dcaro at redhat.com> wrote:
>
>>
>> Hi everyone!
>>
>>
>> I'm having some issues when trying to run the ovirt system tests from
>> ovirt
>> master branch, and I need some help from you guys.
>>
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1328011
>
>
> great, lago caught a regression!
>

In the past it caught many regressions also in 3.6 :-)


> patch will be posted soon
>
> Y.
>
>
>>
>> The issue is that when trying to migrate a vm through the api, I get the
>> error:
>>
>>   RequestError:
>>   status: 400
>>   reason: Bad Request
>>   detail: User is not authorized to perform this action.
>>
>>
>> That does not happen when doing the same through the ui, the vm is
>> migrated
>> correctly.
>>
>> The engine logs don't add much more details:
>>
>> 2016-04-18 06:04:15,393 INFO
>> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15)
>> [29237280] No permission found for user
>> '0000001a-001a-001a-001a-0000000002dd' or one of the groups he is member
>> of, when running action 'MigrateVmToServer', Required permissions are:
>> Action type: 'USER' Action group: 'CREATE_VM' Object type: 'Cluster'
>> Object ID: 'null'.
>> 2016-04-18 06:04:15,393 WARN
>> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-15)
>> [29237280] Validation of action 'MigrateVmToServer' failed for user
>> admin at internal-authz. Reasons:
>> VAR__ACTION__MIGRATE,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
>> 2016-04-18 06:04:15,413 ERROR
>> [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default
>> task-15) [] Operation Failed: [User is not authorized to perform this
>> action.]
>>
>>
>> Something that looks odd to me too, is that in the roles, when you edit
>> the
>> 'SuperUser' role (the one the admin user belongs to) there there's one
>> permission missing, the 'VM->Provisioning Operations->Create Instance',
>> and
>> can't be added (it's greyed out), not sure if it's related though, I can
>> pass
>> you a screenshot if you want.
>>
>>
>> I can give you access to an environment where that happens and more
>> details/logs/etc if you want to look deeper into it.
>>
>>
>> Thanks!
>>
>>
>> --
>> David Caro
>>
>> Red Hat S.L.
>> Continuous Integration Engineer - EMEA ENG Virtualization R&D
>>
>> Tel.: +420 532 294 605
>> Email: dcaro at redhat.com
>> IRC: dcaro|dcaroest@{freenode|oftc|redhat}
>> Web: www.redhat.com
>> RHT Global #: 82-62605
>>
>
> _______________________________________________
> Devel mailing list
> Devel at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/devel
>
>
>
> _______________________________________________
> Devel mailing list
> Devel at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/devel/attachments/20160418/a848a699/attachment-0001.html>