[ovirt-users] How to protect SHE VM from being deleted in following setup

[Vrgotic, Marko]

Hi Michal,

This is exactly what I would expect to achieve by default, if creating regular user.

However, these users are allowed Admin access, and therefore, I have created “very” limited accounts, so that they can Create,Manipulate,Delete VMs, but I do not see how and where I can set that this is allowed only for VMs they own.

Here are the screenshots of the Role “AWS VM Operator” I created for them:
[cid:image001.png at 01D3A966.FB0232E0]
[cid:image002.png at 01D3A966.FB0232E0]
[cid:image003.png at 01D3A966.FB0232E0]

Following one actually contains what they are allowed to:

[cid:image004.png at 01D3A966.FB0232E0]

What am I missing?

Kindly awaiting your reply.

Marko


From: Michal Skrivanek <michal.skrivanek at redhat.com>
Date: Sunday, 18 February 2018 at 15:23
To: "Vrgotic, Marko" <M.Vrgotic at activevideo.com>
Cc: users <users at ovirt.org>
Subject: Re: [ovirt-users] How to protect SHE VM from being deleted in following setup

Why do you give them permissions to HE VM? You should be able to give them creation, but not let them delete VMs they do not own
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180219/f8f93a28/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 53501 bytes
Desc: image001.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180219/f8f93a28/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 41789 bytes
Desc: image002.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180219/f8f93a28/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 13484 bytes
Desc: image003.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180219/f8f93a28/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 26559 bytes
Desc: image004.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180219/f8f93a28/attachment-0003.png>