Bug 1232419
Summary: | User doesn't get the UserVmManager permission on a VM | ||
---|---|---|---|
Product: | Red Hat Enterprise Virtualization Manager | Reporter: | rhev-integ |
Component: | ovirt-engine | Assignee: | Shmuel Melamud <smelamud> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | Ondra Machacek <omachace> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 3.4.0 | CC: | acathrow, bazulay, ecohen, gklein, juan.hernandez, lpeer, lsurette, michal.skrivanek, mkosek, ofrenkel, oourfali, pspacek, pstehlik, rbalakri, Rhev-m-bugs, sherold, tbabej, yeylon |
Target Milestone: | --- | Keywords: | Reopened, ZStream |
Target Release: | 3.5.4 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | virt | ||
Fixed In Version: | vt16.1 | Doc Type: | Bug Fix |
Doc Text: |
Cause: If a VM was created using Admin Portal UI or using REST API with "Filter: false", the user that created the VM was never given ownership of it.
Consequence: It was OK for admin users, because they can set ownership afterwards. But regular user having ReadOnlyAdmin (to give access to Admin Portal) and PowerUser permission can create VMs from Admin Portal UI, but cannot access it after that. Similar problem existed with REST API.
Fix: New rule was introduced: users without admin rights are always given permission to manage the VM if they have permission to create it.
Result: The behaviour has been changed only for regular users without admin rights that create VMs using Admin Portal or REST API with "Filter: false" (which is treated like usage of Admin Portal). Now they are always given ownership of the VMs they've created.
In other cases the behaviour is still the same. For VMs created using User Portal or with REST API with "Filter: true" the ownership is always given to the creator - regular users and admin users are treated equally. For VMs created by admin users using Admin Portal or with REST API with "Filter: false" the ownership is not given to the creator, because admin users are typically using Admin Portal to create VMs for others.
|
Story Points: | --- |
Clone Of: | 1121144 | Environment: | |
Last Closed: | 2015-09-06 17:09:02 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1121144 | ||
Bug Blocks: |
Comment 1
Eyal Edri
2015-09-06 17:09:02 UTC
|