Thanks Josh, I don’t know how I missed that.
-- Al Quiros Enterprise Systems On 12/6/18, 5:15 PM, "Josh Thompson" <[email protected]> wrote: Hi Al, I don't remember at which version this change happened, but creating new images is now rolled into the Reservations page. The radio button selection on the Edit Image Profiles page is just there to help people get to the right place that used VCL before that change. With the Administer resource privilege removed, see if those users have access to create new images by going to Reservations, New Reservation, and selecting the "Imaging Reservation" radio button at the top of the dialog. I think having the Administer privilege is now checked for all resource types, and if someone doesn't have it for a given resource, they get a message similar to what you saw about not having access to manage any images. Josh On Thursday, December 6, 2018 2:18:59 PM EST Evelio Quiros wrote: > Apologies, > > The settings for shib-staff on the privilege tree are as follows: > > VCL 2.3.2 > Image Admin > Image Checkout > > Resources > All Images: Available > All VM Images: Available > VCL 2.5 > Image Admin > Image Checkout > > Resources > All Images: Available, Administer > All VM Images: Available, Administer > > If I take away Administer for the version 2.5 Resources, I get “You don't > have access to manage any images.” I suspect that I need to take away > Administer from the Resources, then add additional privileges for > “Create/Update Image” I don’t see that option in “Additional Privileges” > tab. How can I set the shib-staff users to ONLY create new images, not edit > image profiles? > -- Al Quiros > Enterprise Systems > > > > From: Evelio Quiros <[email protected]> > Reply-To: "[email protected]" <[email protected]> > Date: Thursday, December 6, 2018 at 1:55 PM > To: "[email protected]" <[email protected]> > Subject: VCL privileges question > > Hello, > > We are upgrading VCL from version 2.3.2 to version 2.5. > > We have shib-staff as a node in the privilege tree to represent faculty. > They should have the ability to create new images from existing ones. > > On the privilege tree for both systems: > The shib-staff node has this set for User Groups: > > · Image Admin > > · Image Checkout > They also have this under Resources: > > · All images: Available, Administer > > · All VM images: Available, Administer > > On the 2.3.2 system, when a user selects “Manage Images”, they get only get > “Create / Update an Image” On the 2.5 system, they ALSO get “Edit Image > Profiles” > > So, on the new (2.5) system, those users are able to edit image profiles. > We would prefer them to not have that ability, but to only create new > images. > How can we accomplish that via the privilege tree? > > -- Al Quiros > Enterprise Systems > > -- ------------------------------- Josh Thompson Systems Programmer Virtual Computing Lab (VCL) North Carolina State University [email protected] 919-515-5323 my GPG/PGP key can be found at www.keyserver.net All electronic mail messages in connection with State business which are sent to or received by this account are subject to the NC Public Records Law and may be disclosed to third parties.
