Change in ovirt-engine[master]: engine: Update roles to support Network permissions

[masayag at redhat.com]

Moti Asayag has submitted this change and it was merged.

Change subject: engine: Update roles to support Network permissions
......................................................................


engine: Update roles to support Network permissions

The patch introduces a new role for network users:
NetworkUser which provides the user the permissions for
attaching a network to its VM.

In addition, the upgrade script contains the roles and permissions
updates as described on the feature page:
1. Separate CONFIGURE_STORAGE_POOL_NETWORK to three roles:
1.1. CREATE_STORAGE_POOL_NETWORK
1.2. DELETE_STORAGE_POOL_NETWORK
1.3. CONFIGURE_STORAGE_POOL_NETWORK - acts as EDIT action group
2. Associate ASSIGN_CLUSTER_NETWORK action group with SUPER_USER,
DATA_CENTER_ADMIN and NETWORK_ADMIN.
3. Update Network Admin role
4. Grant 'NetworkUser' permission to 'everyone' for all of the networks.

Change-Id: I5b1d13c7578e6c5fcbf0852cb63b1f6bc51a511d
Signed-off-by: Moti Asayag <masayag at redhat.com>
---
A backend/manager/dbscripts/upgrade/03_02_0040_add_permissions_on_networks.sql
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/PredefinedRoles.java
2 files changed, 135 insertions(+), 1 deletion(-)

Approvals:
  Mike Kolesnik: Looks good to me, approved
  Moti Asayag: Verified


--
To view, visit http://gerrit.ovirt.org/9539
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I5b1d13c7578e6c5fcbf0852cb63b1f6bc51a511d
Gerrit-PatchSet: 9
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Moti Asayag <masayag at redhat.com>
Gerrit-Reviewer: Allon Mureinik <amureini at redhat.com>
Gerrit-Reviewer: Eli Mesika <emesika at redhat.com>
Gerrit-Reviewer: Livnat Peer <lpeer at redhat.com>
Gerrit-Reviewer: Mike Kolesnik <mkolesni at redhat.com>
Gerrit-Reviewer: Moti Asayag <masayag at redhat.com>
Gerrit-Reviewer: Muli Salem <msalem at redhat.com>