[ovirt-users] Access VM Console on a Smart Phone with User Permission

[Filip Krepinsky]

On Tue, Jun 27, 2017 at 12:26 PM, Tomas Jelinek <tjelinek at redhat.com> wrote:

>
>
> On Tue, Jun 27, 2017 at 12:08 PM, Jerome R <jerzkie102030 at gmail.com>
> wrote:
>
>> I tried this workaround, I tried to logon the user acct to moVirt with 1
>> of the admin permission resources, it works I can access to the VM assigned
>> however I'm able to see what Admin can see in the portal though not able to
>> perform action. So far that's one of my concern the user should be able to
>> see just his/her VM assigned.
>>
>
> yes, this is a consequence of using the admin API - you can see all the
> entities and do actions only on the ones you have explicit rights to.
>
> Unfortunately, until the https://github.com/oVirt/moVirt/issues/282 is
> done, there is nothing better I can offer you.
>
> We can try to give that item a priority, just need to get the current RC
> out of the door (hopefully soon).
>
>
>>
>> Thanks,
>> Jerome
>>
>> On Tue, Jun 27, 2017 at 3:20 PM, Tomas Jelinek <tjelinek at redhat.com>
>> wrote:
>>
>>>
>>>
>>> On Tue, Jun 27, 2017 at 10:13 AM, Jerome Roque <jerzkie102030 at gmail.com>
>>> wrote:
>>>
>>>> Hi Tomas,
>>>>
>>>> Thanks for your response. What do you mean by "removing the support for
>>>> user permissions"? I'm using
>>>>
>>>
>>> The oVirt permission model expects to be told explicitly by one header
>>> if the logged in user has some admin permissions or not. In the past the
>>> API behaved differently in this two cases so we needed to remove the option
>>> to use it without admin permissions.
>>>
>>> Now the situation is better so we may be able to bring this support
>>> back, but it will require some testing.
>>>
>>
I created an experimental apk here
https://github.com/suomiy/moVirt/raw/user-roles/moVirt/moVirt-release.apk
It has some limitations for user roles, so entity events and event search
query are disabled. Also the apk has not been tested thoroughly.


>
>>>
>>>> the latest version of moVirt 1.7.1, and ovirt-engine 4.1.
>>>> Is there anyone tried running user role in moVirt?
>>>>
>>>
Please let us know if this works for you or if you encounter any bugs.

Regards
Filip


>>> you will get permission denied from the API if you try to log in with a
>>> user which has no admin permission. If you give him any admin permission on
>>> any resource, it might work as a workaround.
>>>
>>>
>>>>
>>>> Best Regards,
>>>> Jerome
>>>>
>>>> On Tue, Jun 20, 2017 at 5:14 PM, Tomas Jelinek <tjelinek at redhat.com>
>>>> wrote:
>>>>
>>>>>
>>>>>
>>>>> On Fri, Jun 16, 2017 at 6:14 AM, Jerome Roque <jerzkie102030 at gmail.com
>>>>> > wrote:
>>>>>
>>>>>> Good day oVirt Users,
>>>>>>
>>>>>> I need some little help. I have a KVM and used oVirt for the
>>>>>> management of VMs. What I want is that my client will log on to their
>>>>>> account and access their virtual machine using their Smart phone. I tried
>>>>>> to install mOvirt and yes can connect to the console of my machine, but it
>>>>>> is only accessible for admin console.
>>>>>>
>>>>>
>>>>> moVirt originally worked both with admin and user permissions. We had
>>>>> to remove the support for user permissions since the oVirt API did not
>>>>> provide all features moVirt needed for user permissions (search for
>>>>> example). But the API moved significantly since then (the search works also
>>>>> for users now for one) so we can move it back. I have opened an issue about
>>>>> it: https://github.com/oVirt/moVirt/issues/282 - we can try to do it
>>>>> in next version.
>>>>>
>>>>>
>>>>>> Tried to use web console, it downloaded console.vv but can't open it.
>>>>>> By any chance could make this thing possible?
>>>>>>
>>>>>
>>>>> If you want to use a web console for users, I would suggest to try the
>>>>> new ovirt-web-ui [1] - you have a link to it from oVirt landing page and
>>>>> since 4.1 it is installed by default with oVirt.
>>>>>
>>>>> The .vv file can not be opened using aSPICE AFAIK - adding Iordan as
>>>>> the author of aSPICE to comment on this.
>>>>>
>>>>> [1]: https://github.com/oVirt/ovirt-web-ui
>>>>>
>>>>>
>>>>>>
>>>>>> Thank you,
>>>>>> Jerome
>>>>>>
>>>>>> _______________________________________________
>>>>>> Users mailing list
>>>>>> Users at ovirt.org
>>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20170704/0d6bd1b7/attachment-0001.html>