Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1298094

Summary: Pool VMs get UserVmManager role assigned automatically
Product: Red Hat Enterprise Virtualization Manager Reporter: Roman Hodain <rhodain>
Component: ovirt-engineAssignee: Shmuel Melamud <smelamud>
Status: CLOSED ERRATA QA Contact: sefi litmanovich <slitmano>
Severity: high Docs Contact:
Priority: high    
Version: 3.5.6CC: gklein, lsurette, melewis, mgoldboi, michal.skrivanek, pstehlik, rbalakri, Rhev-m-bugs, rhodain, sbonazzo, yeylon, ykaul
Target Milestone: ovirt-3.6.3   
Target Release: 3.6.3   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Previously, when a non-administrator created a virtual machine in a virtual machine pool ownership was automatically granted. This caused the virtual machine to be designated as occupied and prevented other users from taking it. Now, the ownership of virtual machines in a virtual machine pool is not granted automatically.
 Story Points: ---
Clone Of:
: 1301867 (view as bug list) Environment:
Last Closed: 2016-03-09 21:15:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1301867    

Description Roman Hodain 2016-01-13 08:57:27 UTC 
Description of problem:
    When a user which do not have the system permission "Manipulate Permissions" creates a pool. All the pool VMs get this user as UserVmManager.

Version-Release number of selected component (if applicable):
   RHEV-M 3.5.6

How reproducible:
   100%

Steps to Reproduce:
Create user with the following permissions:
    CREATE_VM
    EDIT_VM_PROPERTIES
    VM_BASIC_OPERATIONS
    CHANGE_VM_CD
    MIGRATE_VM
    CONNECT_TO_VM
    IMPORT_EXPORT_VM
    CONFIGURE_VM_NETWORK
    CONFIGURE_VM_STORAGE
    MOVE_VM
    MANIPULATE_VM_SNAPSHOTS
    RECONNECT_TO_VM
    CHANGE_VM_CUSTOM_PROPERTIES
    CREATE_INSTANCE
    CREATE_TEMPLATE
    EDIT_TEMPLATE_PROPERTIES
    COPY_TEMPLATE
    CONFIGURE_TEMPLATE_NETWORK
    CREATE_VM_POOL
    EDIT_VM_POOL_CONFIGURATION
    DELETE_VM_POOL
    VM_POOL_BASIC_OPERATIONS
    LOGIN
    TAG_MANAGEMENT
    BOOKMARK_MANAGEMENT
    EVENT_NOTIFICATION_MANAGEMENT
    ATTACH_DISK_PROFILE

Create pool with this user.

Actual results:
     All pool VM has the user as UserVmManager assigned

Expected results:
     There are no permissions assigned to the pool VMs
Comment 2 Roman Hodain 2016-01-13 10:21:07 UTC 
*** Bug 1298091 has been marked as a duplicate of this bug. ***
Comment 3 Roman Hodain 2016-01-13 10:21:22 UTC 
*** Bug 1298092 has been marked as a duplicate of this bug. ***
Comment 4 Michal Skrivanek 2016-01-13 16:33:22 UTC 
is that user portal or webadmin?
Comment 5 Roman Hodain 2016-01-14 08:14:01 UTC 
(In reply to Michal Skrivanek from comment #4)
> is that user portal or webadmin?

WebAdmin
Comment 6 Michal Skrivanek 2016-01-14 08:37:30 UTC 
regression introduced by bug 1232419. Such change doesn't make sense for pools where the pool creator should not own the VMs (it's a edge case when the pool creator does not actually have MANIPULATE_PERMISSIONS role)
Comment 10 sefi litmanovich 2016-01-28 13:50:31 UTC 
Verified with rhevm-3.6.3-0.1.el6.noarch according to description.
Comment 12 errata-xmlrpc 2016-03-09 21:15:13 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0376.html