[ovirt-users] user permissions

[Zhong Qiang]

Hi,

   I tried to give a user the permissions for  vms. when this user log in
vm portal ,get  messages  "No VM available."
 this user was granted follow roles:
   UserVmManager
   UserRole

 engine logs:
 2018-01-10 20:32:33,938-05 INFO
[org.ovirt.engine.core.bll.AddPermissionCommand]
(EE-ManagedThreadFactory-engine-Thread-7438)
[9b5a405a-c956-4d69-b286-f6b22cbf3c12] Running command:
AddPermissionCommand internal: false. Entities affected :  ID:
1cf75959-7992-43fe-a1f7-ed6c0c48fd35 Type: VMAction group
MANIPULATE_PERMISSIONS with role type USER,  ID:
1cf75959-7992-43fe-a1f7-ed6c0c48fd35 Type: VMAction group
 ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER
2018-01-10 20:32:33,944-05 INFO
[org.ovirt.engine.core.bll.aaa.AddUserCommand]
(EE-ManagedThreadFactory-engine-Thread-7438) [787deac0] Running command:
AddUserCommand internal: true. Entities affected :
ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group
MANIPULATE_USERS with role type ADMIN
2018-01-10 20:32:33,981-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedThreadFactory-engine-Thread-7438) [787deac0] EVENT_ID:
USER_ADD(149), User 'zhongq at ctcnet.com' was added successfully to the
system.
2018-01-10 20:32:34,036-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedThreadFactory-engine-Thread-7438) [787deac0] EVENT_ID:
USER_ADD_PERMISSION(850), User/Group zhongq at ctcnet.com, Namespace
DC=ctcnet,DC=com, Authorization provider: ctcnet.com-authz was granted
permission for Role UserRole on VM ubuntu16.04-64, by admin at internal-authz.


2018-01-10 20:38:06,263-05 INFO
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-4) []
User zhongq at ctcnet.com successfully logged in with scopes: ovirt-app-admin
ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~
ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search
ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate
ovirt-ext=token:passwor
d-access
2018-01-10 20:38:06,301-05 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5)
[2a6c3d14] Running command: CreateUserSessionCommand internal: false.
2018-01-10 20:38:06,338-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [2a6c3d14] EVENT_ID: USER_VDC_LOGIN(30), User
zhongq at ctcnet.com@ctcnet.com-authz connecting from '10.10.19.228' using
session
'z0/9HgB4mjzfDnIN4P/fe4A3fzwWIWWcR9xKDvsI/XXgHZApjRp1BCufgtSK6n3kvA/ScdP4qqGqiX01lyJHSQ=='
logged in.
2018-01-10 20:38:06,956-05 ERROR
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-14)
[06c80cc6-ad15-4d82-a907-21ab9a5c1cc4] Query execution failed due to
insufficient permissions.
2018-01-10 20:38:07,044-05 ERROR
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-20)
[1b7a6564-534d-4df5-a2b7-52da214b95cd] Query execution failed due to
insufficient permissions.
2018-01-10 20:38:07,045-05 ERROR
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default
task-20) [] Operation Failed: query execution failed due to insufficient
permissions.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180111/c85e5b8a/attachment.html>