[ovirt-users] Access VM Console on a Smart Phone with User Permission

[Tomas Jelinek]

On Tue, Jun 27, 2017 at 12:08 PM, Jerome R <jerzkie102030 at gmail.com> wrote:

> I tried this workaround, I tried to logon the user acct to moVirt with 1
> of the admin permission resources, it works I can access to the VM assigned
> however I'm able to see what Admin can see in the portal though not able to
> perform action. So far that's one of my concern the user should be able to
> see just his/her VM assigned.
>

yes, this is a consequence of using the admin API - you can see all the
entities and do actions only on the ones you have explicit rights to.

Unfortunately, until the https://github.com/oVirt/moVirt/issues/282 is
done, there is nothing better I can offer you.

We can try to give that item a priority, just need to get the current RC
out of the door (hopefully soon).


>
> Thanks,
> Jerome
>
> On Tue, Jun 27, 2017 at 3:20 PM, Tomas Jelinek <tjelinek at redhat.com>
> wrote:
>
>>
>>
>> On Tue, Jun 27, 2017 at 10:13 AM, Jerome Roque <jerzkie102030 at gmail.com>
>> wrote:
>>
>>> Hi Tomas,
>>>
>>> Thanks for your response. What do you mean by "removing the support for
>>> user permissions"? I'm using
>>>
>>
>> The oVirt permission model expects to be told explicitly by one header if
>> the logged in user has some admin permissions or not. In the past the API
>> behaved differently in this two cases so we needed to remove the option to
>> use it without admin permissions.
>>
>> Now the situation is better so we may be able to bring this support back,
>> but it will require some testing.
>>
>>
>>> the latest version of moVirt 1.7.1, and ovirt-engine 4.1.
>>> Is there anyone tried running user role in moVirt?
>>>
>>
>> you will get permission denied from the API if you try to log in with a
>> user which has no admin permission. If you give him any admin permission on
>> any resource, it might work as a workaround.
>>
>>
>>>
>>> Best Regards,
>>> Jerome
>>>
>>> On Tue, Jun 20, 2017 at 5:14 PM, Tomas Jelinek <tjelinek at redhat.com>
>>> wrote:
>>>
>>>>
>>>>
>>>> On Fri, Jun 16, 2017 at 6:14 AM, Jerome Roque <jerzkie102030 at gmail.com>
>>>> wrote:
>>>>
>>>>> Good day oVirt Users,
>>>>>
>>>>> I need some little help. I have a KVM and used oVirt for the
>>>>> management of VMs. What I want is that my client will log on to their
>>>>> account and access their virtual machine using their Smart phone. I tried
>>>>> to install mOvirt and yes can connect to the console of my machine, but it
>>>>> is only accessible for admin console.
>>>>>
>>>>
>>>> moVirt originally worked both with admin and user permissions. We had
>>>> to remove the support for user permissions since the oVirt API did not
>>>> provide all features moVirt needed for user permissions (search for
>>>> example). But the API moved significantly since then (the search works also
>>>> for users now for one) so we can move it back. I have opened an issue about
>>>> it: https://github.com/oVirt/moVirt/issues/282 - we can try to do it
>>>> in next version.
>>>>
>>>>
>>>>> Tried to use web console, it downloaded console.vv but can't open it.
>>>>> By any chance could make this thing possible?
>>>>>
>>>>
>>>> If you want to use a web console for users, I would suggest to try the
>>>> new ovirt-web-ui [1] - you have a link to it from oVirt landing page and
>>>> since 4.1 it is installed by default with oVirt.
>>>>
>>>> The .vv file can not be opened using aSPICE AFAIK - adding Iordan as
>>>> the author of aSPICE to comment on this.
>>>>
>>>> [1]: https://github.com/oVirt/ovirt-web-ui
>>>>
>>>>
>>>>>
>>>>> Thank you,
>>>>> Jerome
>>>>>
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users at ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>
>>>>>
>>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20170627/df8e44b9/attachment.html>