reported in oVirt's users list: http://www.mail-archive.com/users@ovirt.org/msg10659.html

Description of problem:
A user who isn't the quota consumer of a certain quota is able to run a VM which is attach to that quota.

How reproducible:
100%

Wasn't so reproducible since vm's quota drop down was populated by quotas which the user is a consumer of, but in create VM from template, the UI sets the quota with the template quota regardless of permissions.


Steps to Reproduce:
1. create Quota A (and assign it to User A), B (for admin).
2. admin creates a Template and assign it to quota B.
3. User A create a VM from Template and can select quota B.
4. User A runs VM.

Actual results:
The VM runs.

Expected results:
The VM should fail, because the User isn't a quota consumer of the VM's quota