[
https://issues.apache.org/jira/browse/CLOUDSTACK-6332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Prachi Damle resolved CLOUDSTACK-6332.
--------------------------------------
Resolution: Fixed
This test is passing now after recet IAM fixes.
So this bug is not present anymore, hence resolving it.
> [Automation] Failed to create PFrule with permission error "does not have
> permission to perform this operation on these resources on objs"
> ------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: CLOUDSTACK-6332
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6332
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Management Server
> Affects Versions: 4.4.0
> Environment: KVM RHEL 6.3
> Reporter: Rayees Namathponnan
> Assignee: Prachi Damle
> Priority: Blocker
> Fix For: 4.4.0
>
> Attachments: CLOUDSTACK-6329.rar
>
>
> Test case
> integration.component.test_accounts.TestDomainForceRemove.test_forceDeleteDomain
> failing with latest build
> This test case performing below operations
> 1540 # Steps for validations
> 1541 # 1. create a domain DOM
> 1542 # 2. create 2 users under this domain
> 1543 # 3. deploy 1 VM into each of these user accounts
> 1544 # 4. create PF / FW rules for port 22 on these VMs for their
> 1545 # respective accounts
> 1546 # 5. delete the domain with force=true option
> 1547 # Validate the following
> 1548 # 1. listDomains should list the created domain
> 1549 # 2. listAccounts should list the created accounts
> 1550 # 3. listvirtualmachines should show the Running VMs
> 1551 # 4. PF and FW rules should be shown in listFirewallRules
> 1552 # 5. domain should delete successfully and above three list calls
> 1553 # should show all the resources now deleted. listRouters
> should
> 1554 # not return any routers in the deleted accounts/domains
> This test case failing while creating PF rule
> 2014-04-02 17:20:28,092 DEBUG [c.c.a.ApiServlet]
> (catalina-exec-6:ctx-fef1201e ctx-1aba7046 ctx-c95b5405) ===END=== 10.223.2
> 40.194 -- GET
> account=test-TestUserLogin-test_forceDeleteDomain-KV543J&domainid=1503a119-b8b8-4ce8-851c-9af1da80dc59&issourc
> enat=True&apiKey=t3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&associatednetworkid=6
> bf99ca0-e6df-40bc-a66f-fe63b57ed8a0&signature=X2GGH%2F2eo7oS87z1ObWRUzbnXqQ%3D&command=listPublicIpAddresses&response=json&li
> stall=True
> 2014-04-02 17:20:28,097 DEBUG [c.c.a.ApiServlet]
> (catalina-exec-19:ctx-f87f0017) ===START=== 10.223.240.194 -- GET apiKey=t
> 3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&virtualmachineid=ce01d441-d77f-4b5c-8a2
> 3-67f959b330bf&signature=pXyBJU73ioZ%2BNZIe%2Fy%2FIA4Ay9cI%3D&ipaddressid=8b9f259d-f3a3-4060-ae32-6d5c86bcb346&command=create
> PortForwardingRule&privateport=22&protocol=TCP&publicport=22&response=json
> 2014-04-02 17:20:28,124 DEBUG [c.c.u.AccountManagerImpl]
> (catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) Access to
> {Ip[10.223.122.82-1]} granted to
> Acct[e77e5066-ddae-4410-8609-4b8e74a984f9-admin] by
> RoleBasedEntityAccessChecker
> 2014-04-02 17:20:28,127 DEBUG [c.c.a.t.Request]
> (StatsCollector-1:ctx-44b28c8c) Seq 3-3008686026060202681: Received: { Ans:
> , MgmtId: 29066118877352, via: 3, Ver: v1, Flags: 10, { GetHostStatsAnswer } }
> 2014-04-02 17:20:28,178 INFO [c.c.a.ApiServer]
> (catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) PermissionDenied:
> Acct[e77e5066-ddae-4410-8609-4b8e74a984f9-admin] does not have permission to
> perform this operation on these resources on objs: []
> 2014-04-02 17:20:28,178 DEBUG [c.c.a.ApiServlet]
> (catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) ===END===
> 10.223.240.194 -- GET
> apiKey=t3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&virtualmachineid=ce01d441-d77f-4b5c-8a23-67f959b330bf&signature=pXyBJU73ioZ%2BNZIe%2Fy%2FIA4Ay9cI%3D&ipaddressid=8b9f259d-f3a3-4060-ae32-6d5c86bcb346&command=createPortForwardingRule&privateport=22&protocol=TCP&publicport=22&response=json
--
This message was sent by Atlassian JIRA
(v6.2#6252)
