Re: [Openstack] swift containers panel permissions?
thanks for your cases On Wed, Mar 13, 2013 at 10:48 PM, Wyllys Ingersoll wyllys.ingers...@evault.com wrote: On Mar 12, 2013, at 6:56 PM, Kieran Spear kisp...@gmail.com wrote: Hi Wyllys, On 13 March 2013 04:19, Wyllys Ingersoll wyllys.ingers...@evault.com wrote: Can someone point me to docs describing how to add/modify/delete permissions for a horizon panel? I want a non-admin user to be able to access the Swift object-store containers panel in horizon. Currently, the containers panel.py has the permissions set to: permissions = ('openstack.services.object-store',), Only users with Admin role seem to have access to this panel. Can this be changed, and if so, where do I look to make the changes? This permission comes from your keystone service catalog. If you have an object-store entry in your catalog, then all users should see this. I figured it out. The swift proxy-config had the following entry: [filter:keystoneauth] use = egg:swift#keystoneauth operator_roles = admin, swiftoperator But I did not have any swift operator role defined. I must have cut-and-pasted that entry from an online guide somewhere. I changed swiftoperator to Member and now the non-admin users can access the container information. thanks, -Wyllys ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Gareth *Cloud Computing, Openstack, Fitness, Basketball * *Novice Openstack contributer* *My promise: if you find any spelling or grammar mistake in my email from Mar 1 2013, notice me * *and I'll donate 1$ or 1¥ to open organization specified by you.* ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] swift containers panel permissions?
On Mar 12, 2013, at 6:56 PM, Kieran Spear kisp...@gmail.com wrote: Hi Wyllys, On 13 March 2013 04:19, Wyllys Ingersoll wyllys.ingers...@evault.com wrote: Can someone point me to docs describing how to add/modify/delete permissions for a horizon panel? I want a non-admin user to be able to access the Swift object-store containers panel in horizon. Currently, the containers panel.py has the permissions set to: permissions = ('openstack.services.object-store',), Only users with Admin role seem to have access to this panel. Can this be changed, and if so, where do I look to make the changes? This permission comes from your keystone service catalog. If you have an object-store entry in your catalog, then all users should see this. I figured it out. The swift proxy-config had the following entry: [filter:keystoneauth] use = egg:swift#keystoneauth operator_roles = admin, swiftoperator But I did not have any swift operator role defined. I must have cut-and-pasted that entry from an online guide somewhere. I changed swiftoperator to Member and now the non-admin users can access the container information. thanks, -Wyllys ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] swift containers panel permissions?
Can someone point me to docs describing how to add/modify/delete permissions for a horizon panel? I want a non-admin user to be able to access the Swift object-store containers panel in horizon. Currently, the containers panel.py has the permissions set to: permissions = ('openstack.services.object-store',), Only users with Admin role seem to have access to this panel. Can this be changed, and if so, where do I look to make the changes? Also, in general, its pretty ugly for the WSGI server to barf up an Internal Server Error for a simple permissions issue. Has anyone considered making Nova/Horizon fail a little more gracefully in the face of errors rather than the current HTTP 500 status messages? thanks, Wyllys Ingersoll eVault ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] swift containers panel permissions?
Hi Wyllys, On 13 March 2013 04:19, Wyllys Ingersoll wyllys.ingers...@evault.com wrote: Can someone point me to docs describing how to add/modify/delete permissions for a horizon panel? I want a non-admin user to be able to access the Swift object-store containers panel in horizon. Currently, the containers panel.py has the permissions set to: permissions = ('openstack.services.object-store',), Only users with Admin role seem to have access to this panel. Can this be changed, and if so, where do I look to make the changes? This permission comes from your keystone service catalog. If you have an object-store entry in your catalog, then all users should see this. Also, in general, its pretty ugly for the WSGI server to barf up an Internal Server Error for a simple permissions issue. Has anyone considered making Nova/Horizon fail a little more gracefully in the face of errors rather than the current HTTP 500 status messages? It generally does. I suspect there's something else going on in your case, possibly a configuration issue with keystone or swift itself. Paste the error here and we might be able to work out what's going on: http://paste.openstack.org/ Cheers, Kieran thanks, Wyllys Ingersoll eVault ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp