Bug 749579 - default permissions for regular user cannot deploy image
Summary: default permissions for regular user cannot deploy image
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: CloudForms Cloud Engine
Classification: Retired
Component: aeolus-conductor
Version: 1.0.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: rc
Assignee: chris alfonso
QA Contact: wes hayutin
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-10-27 15:29 UTC by Dave Johnson
Modified: 2016-02-01 02:35 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Dave Johnson 2011-10-27 15:29:48 UTC
Description of problem:
====================================
Created a new user and left the default permissions alone.  By default new users are granted CatalogEntry Global User and Pool Global User.  I was under the impression (and maybe this is wrong) these default permissions would be sufficient for deploying images.  When I tried to deploy, was given and error stating hardware profile could not be found.

After granting HWP Administrator permission, the user could then deploy images.  Maybe we need a HWP GlobalUser role?


Version-Release number of selected component (if applicable):
============================================================================
aeolus-all-0.5.0-0.20111025005411git5ff5abd.fc15.noarch
aeolus-conductor-0.5.0-0.20111025005411git5ff5abd.fc15.noarch
aeolus-conductor-daemons-0.5.0-0.20111025005411git5ff5abd.fc15.noarch
aeolus-conductor-doc-0.5.0-0.20111025005411git5ff5abd.fc15.noarch
aeolus-configure-2.2.0-1.20111024205543gitf9232cc.fc15.noarch

Comment 1 chris alfonso 2011-11-03 00:59:16 UTC
Not only was the hardware profile necessary, but also a catalog VIEW, USE permission is needed for the new deployment from a catalog menu.  I fixed both issues and posted it to the list for an ACK.

Comment 2 chris alfonso 2011-11-08 20:20:10 UTC
6aca665dd8005aa695d89d35a2071ae2f2bb2448

conductor repo

Comment 3 wes hayutin 2011-11-10 19:47:21 UTC
verified in 


[root@qeblade31 ~]# rpm -qa | grep aeolus
aeolus-conductor-doc-0.6.0-0.20111110145640gitd58f462.fc15.noarch
aeolus-conductor-0.6.0-0.20111110145640gitd58f462.fc15.noarch
aeolus-all-0.6.0-0.20111110145640gitd58f462.fc15.noarch
rubygem-aeolus-cli-0.1.0-3.20111110100520gitbe66ffb.fc15.noarch
rubygem-aeolus-image-0.1.0-4.20111024205454git6b2b696.fc15.noarch
aeolus-configure-2.3.0-0.20111109080912git9fd4974.fc15.noarch
aeolus-conductor-daemons-0.6.0-0.20111110145640gitd58f462.fc15.noarch
aeolus-conductor-devel-0.6.0-0.20111110145640gitd58f462.fc15.noarch

Comment 4 wes hayutin 2011-11-28 01:16:48 UTC
removing bugs from ce-sprint from the tracker.. you can find these bugs by querying the "qa whiteboard" for ce-sprint-60


Note You need to log in before you can comment on or make changes to this bug.