Hi Daan.

Thanks for your quick reply. 
I see.., 15 is user allowed.  didn't read the description good enough 😊
I have never created any roles.  I tried the -D option with 
migrate-dynamicroles.py 

Med vennlig hilsen

David Larsen 

-----Opprinnelig melding-----
Fra: Daan Hoogland <daan.hoogl...@gmail.com> 
Sendt: mandag 4. oktober 2021 16:59
Til: users <users@cloudstack.apache.org>
Emne: Re: Dynamic Roles and user roles in command.properties

David,
The '=15's mean user is allowed, as 15 = 8+4=2=1 (it is a decimal description 
of a bit-field) Have you created any roles along the way?

On Mon, Oct 4, 2021 at 4:51 PM David Larsen <david.lar...@adcom.no> wrote:

> Hi
>
> I have tried to migrate our Cloudstack (4.15) to use dynamic roles. 
> The migrate process went ok, but users can't log in afterwards...(?).
> When they log in, the only response they get is "discovering..."
> I had to go back to commands.properties.
>
> What are the default user roles  when using dynamic roles?
>
> Which roles are migrated from commands.properties when using 
> migrate-dynamicroles.py?
>
> I have never changed anything in the commands.properties file while 
> upgrading from version 4.2->................4.15 through the years.
>
> When I look in the commands.properties file, I see in the description 
> 8=user.... I can't fint any line in this file with =8
>
> Parts of our commands.properties file:
>
> :/etc/cloudstack/management# cat commands.properties # Licensed to the 
> Apache Software Foundation (ASF) under one # or more contributor 
> license agreements.  See the NOTICE file # distributed with this work 
> for additional information # regarding copyright ownership.  The ASF 
> licenses this file # to you under the Apache License, Version 2.0 (the 
> # "License"); you may not use this file except in compliance # with 
> the License.  You may obtain a copy of the License at #
> #   
> https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.apache.org%2Flicenses%2FLICENSE-2.0&amp;data=04%7C01%7C%7C224ec44958d649a1fe9d08d987477ac6%7C1dd023eed2894f208926463c9b991b5f%7C1%7C1%7C637689563332802043%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=oPHF87TtYNZ5PWqNJdVjMdXVTVpPTNcGJUMlyWMasAo%3D&amp;reserved=0
> #
> # Unless required by applicable law or agreed to in writing, # 
> software distributed under the License is distributed on an # "AS IS" 
> BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY # KIND, either express 
> or implied.  See the License for the # specific language governing 
> permissions and limitations # under the License.
>
> ### bitmap of permissions at the end of each classname, 1 = ADMIN, 2 = 
> RESOURCE_DOMAIN_ADMIN, 4 = DOMAIN_ADMIN, 8 = USER ### Please 
> standardize naming conventions to camel-case (even for acronyms).
>
> ### CloudStack authentication commands
> login=15
> logout=15
>
> ### SAML SSO/SLO commands
> samlSso=15
> samlSlo=15
> getSPMetadata=15
> listIdps=15
> authorizeSamlSso=7
> listSamlAuthorization=7
> listAndSwitchSamlAccount=15
>
> ### Account commands
> createAccount=7
> deleteAccount=7
> updateAccount=7
> disableAccount=7
> enableAccount=7
> lockAccount=7
> listAccounts=15
> markDefaultZoneForAccount=1
>
> #### User commands
> createUser=7
> deleteUser=7
> updateUser=15
> listUsers=15
> lockUser=7
> disableUser=7
> enableUser=7
> getUser=1
>
> #### Domain commands
> createDomain=1
> updateDomain=1
> deleteDomain=1
> listDomains=7
> listDomainChildren=7
>
> ####Cloud Identifier commands
> getCloudIdentifier=15
>
> #### Limit commands
> updateResourceLimit=7
> updateResourceCount=7
> listResourceLimits=15
>
> #### VM commands
> deployVirtualMachine=15
> destroyVirtualMachine=15
> rebootVirtualMachine=15
> startVirtualMachine=15
> stopVirtualMachine=15
> resetPasswordForVirtualMachine=15
> resetSSHKeyForVirtualMachine=15
> updateVirtualMachine=15
> listVirtualMachines=15
> getVMPassword=15
> restoreVirtualMachine=15
> changeServiceForVirtualMachine=15
> scaleVirtualMachine=15
> assignVirtualMachine=7
> migrateVirtualMachine=1
> migrateVirtualMachineWithVolume=1
> recoverVirtualMachine=15
> expungeVirtualMachine=15
> getVirtualMachineUserData=15
>
> #### snapshot commands
> createSnapshot=15
> listSnapshots=15
> deleteSnapshot=15
> createSnapshotPolicy=15
> updateSnapshotPolicy=15
> deleteSnapshotPolicies=15
> listSnapshotPolicies=15
> revertSnapshot=15
>
> #### template commands
> createTemplate=15
> registerTemplate=15
> updateTemplate=15
> copyTemplate=15
> deleteTemplate=15
> listTemplates=15
> .....................
>
> Med vennlig hilsen
>
> David Larsen
> Senior systemkonsulent
>
>
>

--
Daan

Reply via email to