Bug 1356872 – 2.0: An user created from api/v2/user does not have permission to run any API command

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1356872 - 2.0: An user created from api/v2/user does not have permission to run any API command

Summary:	2.0: An user created from api/v2/user does not have permission to run any API...

Status:	CLOSED WONTFIX

Aliases:	None

Product:	Red Hat Ceph Storage
Classification:	Red Hat
Component:	Calamari (Show other bugs)
Sub Component:
Version:	2.0
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	rc
Target Release:	2.3
Assigned To:	Gregory Meno
QA Contact:	ceph-qe-bugs
Docs Contact:	Bara Ancincova

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:	1322504 1383917 1412948
	Show dependency tree / graph

Reported:	2016-07-15 03:44 EDT by Harish NV Rao
Modified:	2017-04-04 14:24 EDT (History)
CC List:	3 users (show)

See Also:
Fixed In Version:
Doc Type:	Known Issue
Doc Text:	.Users created by using the Calamari API do not have permissions to run the API commands When a user is created by using the Calamari REST API (`api/v2/user`), the user does not have permissions to run most of the Calamari API commands. Consequently, an attempt to run the commands fails with the following error message: ---- "You do not have permission to perform this action" ---- To work around this issue, use the `calamari-ctl add_user` command from the command line when creating new users.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-04-04 14:24:29 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Harish NV Rao 2016-07-15 03:44:36 EDT

Description of problem:

An user created from api/v2/user does not have permission to run any API command


Version-Release number of selected component (if applicable):
calamari-server-1.4.5-1.el7cp.x86_64
ceph version 10.2.2-21


How reproducible: always


Steps to Reproduce:
1) create a user from api/v2/user
2) login as this user to calamari via Django REST framework in any supported browser
3) try running commands like /api/v2/cluster/<id>/crush_map or crush_rule or osd or mon etc., or api/v2/user. 
4) almost all the commands fail with error message: "You do not have permission to perform this action"
5) This does not happen for a user created from "calamari-ctl add_user"

Actual results:


Expected results:


Additional info:

Comment 2 Harish NV Rao 2016-07-15 03:49:15 EDT

Additional info: when an user created from api/v2/user is 'renamed' using 'calamari-ctl rename_user' command, the changed user cannot log back to calamari-lite.

Comment 6 Gregory Meno 2016-08-17 12:36:23 EDT

Looks good

Note You need to log in before you can comment on or make changes to this bug.