Re: [Openstack] swift containers panel permissions?
thanks for your cases
On Wed, Mar 13, 2013 at 10:48 PM, Wyllys Ingersoll <
wyllys.ingers...@evault.com> wrote:
>
> On Mar 12, 2013, at 6:56 PM, Kieran Spear wrote:
>
> > Hi Wyllys,
> >
> > On 13 March 2013 04:19, Wyllys Ingersoll
> wrote:
> >> Can someone point me to docs describing how to add/modify/delete
> permissions for a horizon panel?
> >>
> >> I want a non-admin user to be able to access the Swift object-store
> containers panel in horizon. Currently, the containers panel.py has the
> permissions set to:
> >>permissions = ('openstack.services.object-store',),
> >>
> >> Only users with "Admin" role seem to have access to this panel. Can
> this be changed, and if so, where do I look to make the changes?
> >
> > This permission comes from your keystone service catalog. If you have
> > an "object-store" entry in your catalog, then all users should see
> > this.
>
>
> I figured it out. The swift proxy-config had the following entry:
>
> [filter:keystoneauth]
> use = egg:swift#keystoneauth
> operator_roles = admin, swiftoperator
>
> But I did not have any "swift operator" role defined. I must have
> cut-and-pasted that entry from an online guide somewhere. I changed
> "swiftoperator" to "Member" and now the non-admin users can access the
> container information.
>
> thanks,
> -Wyllys
>
>
>
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
--
Gareth
*Cloud Computing, Openstack, Fitness, Basketball
*
*Novice Openstack contributer*
*My promise: if you find any spelling or grammar mistake in my email from
Mar 1 2013, notice me *
*and I'll donate 1$ or 1￥ to open organization specified by you.*
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] swift containers panel permissions?
On Mar 12, 2013, at 6:56 PM, Kieran Spear wrote:
> Hi Wyllys,
>
> On 13 March 2013 04:19, Wyllys Ingersoll wrote:
>> Can someone point me to docs describing how to add/modify/delete permissions
>> for a horizon panel?
>>
>> I want a non-admin user to be able to access the Swift object-store
>> containers panel in horizon. Currently, the containers panel.py has the
>> permissions set to:
>>permissions = ('openstack.services.object-store',),
>>
>> Only users with "Admin" role seem to have access to this panel. Can this be
>> changed, and if so, where do I look to make the changes?
>
> This permission comes from your keystone service catalog. If you have
> an "object-store" entry in your catalog, then all users should see
> this.
I figured it out. The swift proxy-config had the following entry:
[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = admin, swiftoperator
But I did not have any "swift operator" role defined. I must have
cut-and-pasted that entry from an online guide somewhere. I changed
"swiftoperator" to "Member" and now the non-admin users can access the
container information.
thanks,
-Wyllys
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] swift containers panel permissions?
Hi Wyllys,
On 13 March 2013 04:19, Wyllys Ingersoll wrote:
> Can someone point me to docs describing how to add/modify/delete permissions
> for a horizon panel?
>
> I want a non-admin user to be able to access the Swift object-store
> containers panel in horizon. Currently, the containers panel.py has the
> permissions set to:
> permissions = ('openstack.services.object-store',),
>
> Only users with "Admin" role seem to have access to this panel. Can this be
> changed, and if so, where do I look to make the changes?
This permission comes from your keystone service catalog. If you have
an "object-store" entry in your catalog, then all users should see
this.
>
> Also, in general, its pretty ugly for the WSGI server to barf up an "Internal
> Server Error" for a simple permissions issue. Has anyone considered making
> Nova/Horizon fail a little more gracefully in the face of errors rather than
> the current HTTP 500 status messages?
It generally does. I suspect there's something else going on in your
case, possibly a configuration issue with keystone or swift itself.
Paste the error here and we might be able to work out what's going on:
http://paste.openstack.org/
Cheers,
Kieran
>
>
> thanks,
> Wyllys Ingersoll
> eVault
>
>
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] swift containers panel permissions?
Can someone point me to docs describing how to add/modify/delete permissions
for a horizon panel?
I want a non-admin user to be able to access the Swift object-store containers
panel in horizon. Currently, the containers panel.py has the permissions set
to:
permissions = ('openstack.services.object-store',),
Only users with "Admin" role seem to have access to this panel. Can this be
changed, and if so, where do I look to make the changes?
Also, in general, its pretty ugly for the WSGI server to barf up an "Internal
Server Error" for a simple permissions issue. Has anyone considered making
Nova/Horizon fail a little more gracefully in the face of errors rather than
the current HTTP 500 status messages?
thanks,
Wyllys Ingersoll
eVault
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
