Re: [ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES

[Eli Mesika]

- Original Message -
> From: "Maksim Naumov" 
> To: "users" 
> Sent: Monday, November 23, 2015 11:18:09 AM
> Subject: Re: [ovirt-users] [3.6] User can't create a VM. No permission for
> EDIT_ADMIN_VM_PROPERTIES
> 
> CPU pinning topology is also not used in this template. And even there is no
> settings in the user interface to change it.
> 
> So, currently no one user is able to create new VM.

Seems to me as a bug 
Can you please open a bug, attach all relevant logs and also fully describe the 
template that you attempt to use to create the VM?

> 
> On Mon, Nov 23, 2015 at 8:54 AM, Maksim Naumov < maksim.nau...@hitmeister.de
> > wrote:
> 
> 
> 
> As I was able to understand this error mean that user tried to rewrite the
> destination host of VM. But the problem is that there is no setting like
> this in the user interface. User can't change the destination 100%. It is
> not hardcoded in the template settings because he was trying to run Base
> template (which is not attached to any host).
> 
> On Mon, Nov 23, 2015 at 8:36 AM, Maksim Naumov < maksim.nau...@hitmeister.de
> > wrote:
> 
> 
> 
> Hello
> 
> I faced with the problem. The user can;t create a VM. The user has
> PowerUserRole on Cluster. He tried to create a VM with a base template and
> had no success.
> 
> Here some lines from log. Have no idea why it wants for
> EDIT_ADMIN_VM_PROPERTIES permission for user?
> 
> 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] Checking whether user
> 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member of,
> have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615
> Type: VdsGroupsAction group CREATE_VM with role type USER, ID:
> ---- Type: VmTemplateAction group CREATE_VM
> with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type:
> VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN
> 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] Found permission
> '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on
> 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'
> 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] Found permission
> '0004-0004-0004-0004-0355' for user when running 'AddVm', on
> 'Template' with id '----'
> 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] No permission found for user when running
> action 'AddVm', on object 'Cluster' for action group
> 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'.
> 2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user
> vincent.en...@hitmeister.de@ hitmeister.de . Reasons:
> VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
> 
> --
> Maksim Naumov
> Hitmeister GmbH
> Softwareentwickler
> 
> Habsburgerring 2
> 50674 Köln
> 
> E: maksim.nau...@hitmeister.de
> www.hitmeister.de
> 
> HRB 59046, Amtsgericht Köln
> Geschäftsführer: Dr. Gerald Schönbucher
> 
> 
> 
> --
> Maksim Naumov
> Hitmeister GmbH
> Softwareentwickler
> 
> Habsburgerring 2
> 50674 Köln
> 
> E: maksim.nau...@hitmeister.de
> www.hitmeister.de
> 
> HRB 59046, Amtsgericht Köln
> Geschäftsführer: Dr. Gerald Schönbucher
> 
> 
> 
> --
> Maksim Naumov
> Hitmeister GmbH
> Softwareentwickler
> 
> Habsburgerring 2
> 50674 Köln
> 
> E: maksim.nau...@hitmeister.de
> www.hitmeister.de
> 
> HRB 59046, Amtsgericht Köln
> Geschäftsführer: Dr. Gerald Schönbucher
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES

[Maksim Naumov]

I've created one https://bugzilla.redhat.com/show_bug.cgi?id=1284472

On Mon, Nov 23, 2015 at 11:14 AM, Eli Mesika  wrote:

>
>
> - Original Message -
> > From: "Maksim Naumov" 
> > To: "users" 
> > Sent: Monday, November 23, 2015 11:18:09 AM
> > Subject: Re: [ovirt-users] [3.6] User can't create a VM. No permission
> forEDIT_ADMIN_VM_PROPERTIES
> >
> > CPU pinning topology is also not used in this template. And even there
> is no
> > settings in the user interface to change it.
> >
> > So, currently no one user is able to create new VM.
>
> Seems to me as a bug
> Can you please open a bug, attach all relevant logs and also fully
> describe the template that you attempt to use to create the VM?
>
> >
> > On Mon, Nov 23, 2015 at 8:54 AM, Maksim Naumov <
> maksim.nau...@hitmeister.de
> > > wrote:
> >
> >
> >
> > As I was able to understand this error mean that user tried to rewrite
> the
> > destination host of VM. But the problem is that there is no setting like
> > this in the user interface. User can't change the destination 100%. It is
> > not hardcoded in the template settings because he was trying to run Base
> > template (which is not attached to any host).
> >
> > On Mon, Nov 23, 2015 at 8:36 AM, Maksim Naumov <
> maksim.nau...@hitmeister.de
> > > wrote:
> >
> >
> >
> > Hello
> >
> > I faced with the problem. The user can;t create a VM. The user has
> > PowerUserRole on Cluster. He tried to create a VM with a base template
> and
> > had no success.
> >
> > Here some lines from log. Have no idea why it wants for
> > EDIT_ADMIN_VM_PROPERTIES permission for user?
> >
> > 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> > (default task-160) [2f0eb905] Checking whether user
> > 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member
> of,
> > have the following permissions: ID: a303bbca-af20-4de5-9eff-01c52d3bf615
> > Type: VdsGroupsAction group CREATE_VM with role type USER, ID:
> > ---- Type: VmTemplateAction group
> CREATE_VM
> > with role type USER, ID: a303bbca-af20-4de5-9eff-01c52d3bf615 Type:
> > VdsGroupsAction group EDIT_ADMIN_VM_PROPERTIES with role type ADMIN
> > 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> > (default task-160) [2f0eb905] Found permission
> > '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on
> > 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'
> > 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> > (default task-160) [2f0eb905] Found permission
> > '0004-0004-0004-0004-0355' for user when running 'AddVm', on
> > 'Template' with id '----'
> > 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> > (default task-160) [2f0eb905] No permission found for user when running
> > action 'AddVm', on object 'Cluster' for action group
> > 'EDIT_ADMIN_VM_PROPERTIES' with id
> 'a303bbca-af20-4de5-9eff-01c52d3bf615'.
> > 2015-11-20 16:42:10,894 WARN [org.ovirt.engine.core.bll.AddVmCommand]
> > (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for
> user
> > vincent.en...@hitmeister.de@ hitmeister.de . Reasons:
> > VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
> >
> > --
> > Maksim Naumov
> > Hitmeister GmbH
> > Softwareentwickler
> >
> > Habsburgerring 2
> > 50674 Köln
> >
> > E: maksim.nau...@hitmeister.de
> > www.hitmeister.de
> >
> > HRB 59046, Amtsgericht Köln
> > Geschäftsführer: Dr. Gerald Schönbucher
> >
> >
> >
> > --
> > Maksim Naumov
> > Hitmeister GmbH
> > Softwareentwickler
> >
> > Habsburgerring 2
> > 50674 Köln
> >
> > E: maksim.nau...@hitmeister.de
> > www.hitmeister.de
> >
> > HRB 59046, Amtsgericht Köln
> > Geschäftsführer: Dr. Gerald Schönbucher
> >
> >
> >
> > --
> > Maksim Naumov
> > Hitmeister GmbH
> > Softwareentwickler
> >
> > Habsburgerring 2
> > 50674 Köln
> >
> > E: maksim.nau...@hitmeister.de
> > www.hitmeister.de
> >
> > HRB 59046, Amtsgericht Köln
> > Geschäftsführer: Dr. Gerald Schönbucher
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>



-- 
Maksim Naumov
Hitmeister GmbH
Softwareentwickler

Habsburgerring 2
50674 Köln

E: maksim.nau...@hitmeister.de
www.hitmeister.de

HRB 59046, Amtsgericht Köln
Geschäftsführer: Dr. Gerald Schönbucher
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES

[Maksim Naumov]

As I was able to understand this error mean that user tried to rewrite the
destination host of VM. But the problem is that there is no setting like
this in the user interface. User can't change the destination 100%. It is
not hardcoded in the template settings because he was trying to run Base
template (which is not attached to any host).

On Mon, Nov 23, 2015 at 8:36 AM, Maksim Naumov 
wrote:

> Hello
>
> I faced with the problem. The user can;t create a VM. The user has
> PowerUserRole on Cluster. He tried to create a VM with a base template and
> had no success.
>
> Here some lines from log. Have no idea why it wants
> for EDIT_ADMIN_VM_PROPERTIES permission for user?
>
> 2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] Checking whether user
> 'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member
> of, have the following permissions:  ID:
> a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group CREATE_VM
> with role type USER,  ID: ---- Type:
> VmTemplateAction group CREATE_VM with role type USER,  ID:
> a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group
> EDIT_ADMIN_VM_PROPERTIES with role type ADMIN
> 2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] Found permission
> '129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on
> 'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'
> 2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] Found permission
> '0004-0004-0004-0004-0355' for user when running 'AddVm', on
> 'Template' with id '----'
> 2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] No permission found for user when running
> action 'AddVm', on object 'Cluster' for action group
> 'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'.
> 2015-11-20 16:42:10,894 WARN  [org.ovirt.engine.core.bll.AddVmCommand]
> (default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user
> vincent.en...@hitmeister.de@hitmeister.de. Reasons:
> VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION
>
> --
> Maksim Naumov
> Hitmeister GmbH
> Softwareentwickler
>
> Habsburgerring 2
> 50674 Köln
>
> E: maksim.nau...@hitmeister.de
> www.hitmeister.de
>
> HRB 59046, Amtsgericht Köln
> Geschäftsführer: Dr. Gerald Schönbucher
>



-- 
Maksim Naumov
Hitmeister GmbH
Softwareentwickler

Habsburgerring 2
50674 Köln

E: maksim.nau...@hitmeister.de
www.hitmeister.de

HRB 59046, Amtsgericht Köln
Geschäftsführer: Dr. Gerald Schönbucher
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] [3.6] User can't create a VM. No permission for EDIT_ADMIN_VM_PROPERTIES

[Maksim Naumov]

Hello

I faced with the problem. The user can;t create a VM. The user has
PowerUserRole on Cluster. He tried to create a VM with a base template and
had no success.

Here some lines from log. Have no idea why it wants
for EDIT_ADMIN_VM_PROPERTIES permission for user?

2015-11-20 16:42:10,888 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
(default task-160) [2f0eb905] Checking whether user
'acc9ced5-a764-4d60-84d7-db4b4a498a18' or one of the groups he is member
of, have the following permissions:  ID:
a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group CREATE_VM
with role type USER,  ID: ---- Type:
VmTemplateAction group CREATE_VM with role type USER,  ID:
a303bbca-af20-4de5-9eff-01c52d3bf615 Type: VdsGroupsAction group
EDIT_ADMIN_VM_PROPERTIES with role type ADMIN
2015-11-20 16:42:10,890 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
(default task-160) [2f0eb905] Found permission
'129c57bb-df56-4529-93d9-52db0265263f' for user when running 'AddVm', on
'Cluster' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'
2015-11-20 16:42:10,893 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
(default task-160) [2f0eb905] Found permission
'0004-0004-0004-0004-0355' for user when running 'AddVm', on
'Template' with id '----'
2015-11-20 16:42:10,894 DEBUG [org.ovirt.engine.core.bll.AddVmCommand]
(default task-160) [2f0eb905] No permission found for user when running
action 'AddVm', on object 'Cluster' for action group
'EDIT_ADMIN_VM_PROPERTIES' with id 'a303bbca-af20-4de5-9eff-01c52d3bf615'.
2015-11-20 16:42:10,894 WARN  [org.ovirt.engine.core.bll.AddVmCommand]
(default task-160) [2f0eb905] CanDoAction of action 'AddVm' failed for user
vincent.en...@hitmeister.de@hitmeister.de. Reasons:
VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION

-- 
Maksim Naumov
Hitmeister GmbH
Softwareentwickler

Habsburgerring 2
50674 Köln

E: maksim.nau...@hitmeister.de
www.hitmeister.de

HRB 59046, Amtsgericht Köln
Geschäftsführer: Dr. Gerald Schönbucher
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users