Bug 863067

Summary: [MLA] PowerUserRole can't do basic operations with vm
Product: Red Hat Enterprise Virtualization Manager Reporter: Ondra Machacek <omachace>
Component: ovirt-engineAssignee: Oved Ourfali <oourfali>
Status: CLOSED NOTABUG QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: dyasny, iheim, lpeer, oourfali, oramraz, Rhev-m-bugs, yeylon, ykaul
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: virt
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-10-04 12:41:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
engine.log none

Description Ondra Machacek 2012-10-04 11:32:51 UTC
Created attachment 621570 [details]
engine.log

Description of problem:
PowerUserRole can't run/stop vm, which has permissions for.

Version-Release number of selected component (if applicable):
si19.1

How reproducible:
always

Steps to Reproduce:
1. In webadmin as admin create VM.
2. To this VM add 'PowerUserRole' permissions to user 'user'.
3. Login as user 'user' in UserPortal, and try to run VM.
  
Actual results:
User is not authorized to perform this action.

Expected results:
VM should run.

Additional info:

Comment 2 Itamar Heim 2012-10-04 12:41:38 UTC
this is not a bug.
added doc note to make sure this behavior change is documented (though i'm sure we did on the original bug).

power user is a permission to create VMs/disks/nics/templates.
to manage VMs you need the VMAdmin role.

(otherwise, the bug would be opened that power user on cluster is giving the user a permission to all VMs in the cluster, not only the one they created).