[ovirt-users] Users seeing all vm's

[Jeff Clay]

It sounds line you're adding the permissions to ovirt through the "Users"
tab on the top right. Thats the same thing I did at first. However, the
user's tab is not where you manage all settings for users. Its a bit
counterintuitive. When you add a user in that tab, it adds them to the
"system" object and not to a particular VM or pool which is why the user
has more than desired permissions. What you need to do is remove the users
or groups from the "Users" tab and add them to the specific pool or VM by
selecting the pool, then select the "permissions" sub-tab and then select
"add". This will grant the permissions to only that specific resource.
On Jun 12, 2014 3:08 AM, "Itamar Heim" <iheim at redhat.com> wrote:

> On 06/06/2014 05:52 AM, Artur Sarkisyan wrote:
>
>> Thanks for replay, I have an IPA server for authentication. I am trying
>> some scenarios, but I would like to setup pools of vm's for users,
>> actually one pool for one user.
>>
>
> why one pool for one user?
> a pool allows you to give multiple users access to it, and, specify how
> many VMs each user can get from the pool.
>
>
>> Kind regards,
>> Artur
>>
>>
>> On Thu, Jun 5, 2014 at 8:30 PM, Jeff Clay <jeffclay at gmail.com
>> <mailto:jeffclay at gmail.com>> wrote:
>>
>>     Yes, I have resolved this issue. It was due to my lack of
>>     understanding in how Ovirt expected things to be configured and
>>     setup. Are you using active directory for authentication and setting
>>     up pools of vm's for users to access?
>>
>>
>>     On Thu, Jun 5, 2014 at 1:10 PM, Artur Sarkisyan <s.artur at gmail.com
>>     <mailto:s.artur at gmail.com>> wrote:
>>
>>         Hi Jeff,
>>
>>         I would like to know if you have resolved this issue?
>>
>>         At this moment i'm building a poc and i have the same problem
>>         like yours:
>>         All users can see all vm's. Do you have some suggestions for me ?
>>
>>         Thanks in advanced.
>>
>>
>>         Kind regards,
>>         Artur
>>
>>
>>         On Tue, May 6, 2014 at 10:32 PM, Jeff Clay <jeffclay at gmail.com
>>         <mailto:jeffclay at gmail.com>> wrote:
>>
>>             For some reason, when logged in as a user with a modifed
>>             copy role of
>>             UserRole (only has login permssion and VM -> Basic
>>             Operations -> Remote Log
>>             In permission) the user can see all of the VM's and has the
>>             ability to open
>>             a console, start, shutdown or suspend any of the VM's. I
>>             have verified that
>>             all of the VM's only show the SuperUser role in their
>>             permissions. I went
>>             through all of the roles and verified that the user is only
>>             a member of the
>>             Copy_of_UserRole. The only thing I can think of is that the
>>             user is
>>             inheriting permissions from something, but I can't find what
>>             it is or
>>             where. Any suggestions?
>>
>>             Thanks.
>>
>>             _______________________________________________
>>             Users mailing list
>>             Users at ovirt.org <mailto:Users at ovirt.org>
>>             http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20140612/bd1a03d8/attachment-0001.html>