Request #5062

Instantiate a VM should permit to change the network when user has no USE on the one defined in the template

Added by EOLE Team over 3 years ago. Updated over 3 years ago.

Status:ClosedStart date:03/15/2017
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Sunstone
Target version:-
Pull request:

Description

Hello,

A user who has USE on all the VM resources except the network should be able to modify it and instantiate the VM.

This is not the case actually, up to ONE 5.2.1, as you can see in sunstone-no-net-use.png.

Regards.

NB: It applies to both user and cloud views.

sunstone-no-net-use.png (43.3 KB) EOLE Team, 03/15/2017 03:24 PM

2017-03-23-155859_941x1033_scrot.png (54 KB) Ruben S. Montero, 03/23/2017 03:06 PM

Screenshot from 2017-03-28 11-27-45.png (50.8 KB) Abel Coronado, 03/28/2017 09:37 AM

History

#1 Updated by Ruben S. Montero over 3 years ago

The template can be modified at instantiation. The user should remove the NIC attached to the unauthorized network and add a new one to a network the user can access to.

So, if understand correctly this is already implemented. Closing, we can reopen if needed

#2 Updated by Ruben S. Montero over 3 years ago

  • Status changed from Pending to Closed

#3 Updated by EOLE Team over 3 years ago

Ruben S. Montero wrote:

The template can be modified at instantiation. The user should remove the NIC attached to the unauthorized network and add a new one to a network the user can access to.

No, as you can see on the screen shot, no information is provided when the template is selected, only an error message.

The use can not remove the NIC attached to the unauthorized network nor add a new one.

Regards.

#4 Updated by Ruben S. Montero over 3 years ago

mm, I've uploaded an screenshot, and the parameters I can update. Can I have the output of onetemplate show -x InstallEole-2.6.0-amd64?

(BTW; the VMGroup is for the 5.4 upcoming version but the basic code for update is the same in 5.2)

#5 Updated by EOLE Team over 3 years ago

Ruben S. Montero wrote:

mm, I've uploaded an screenshot, and the parameters I can update. Can I have the output of onetemplate show -x InstallEole-2.6.0-amd64?

<VMTEMPLATE>
  <ID>1</ID>
  <UID>0</UID>
  <GID>0</GID>
  <UNAME>oneadmin</UNAME>
  <GNAME>oneadmin</GNAME>
  <NAME>InstallEole-2.6.0-amd64</NAME>
  <PERMISSIONS>
    <OWNER_U>1</OWNER_U>
    <OWNER_M>1</OWNER_M>
    <OWNER_A>0</OWNER_A>
    <GROUP_U>1</GROUP_U>
    <GROUP_M>0</GROUP_M>
    <GROUP_A>0</GROUP_A>
    <OTHER_U>1</OTHER_U>
    <OTHER_M>0</OTHER_M>
    <OTHER_A>0</OTHER_A>
  </PERMISSIONS>
  <REGTIME>1482240069</REGTIME>
  <TEMPLATE>
    <CPU><![CDATA[0.2]]></CPU>
    <DESCRIPTION><![CDATA[Modèle de VM permettant d'installer un module EOLE 2.6.0 64 bits (non persistente)]]></DESCRIPTION>
    <DISK>
      <DEV_PREFIX><![CDATA[vd]]></DEV_PREFIX>
      <DRIVER><![CDATA[qcow2]]></DRIVER>
      <IMAGE><![CDATA[DSK-50-Go]]></IMAGE>
      <IMAGE_UNAME><![CDATA[oneadmin]]></IMAGE_UNAME>
    </DISK>
    <DISK>
      <DEV_PREFIX><![CDATA[hd]]></DEV_PREFIX>
      <DRIVER><![CDATA[raw]]></DRIVER>
      <IMAGE><![CDATA[ISO-Eole-2.6.0-amd64]]></IMAGE>
      <IMAGE_UNAME><![CDATA[eoleone]]></IMAGE_UNAME>
    </DISK>
    <FEATURES>
      <ACPI><![CDATA[yes]]></ACPI>
      <PAE><![CDATA[no]]></PAE>
    </FEATURES>
    <GRAPHICS>
      <KEYMAP><![CDATA[fr]]></KEYMAP>
      <LISTEN><![CDATA[0.0.0.0]]></LISTEN>
      <TYPE><![CDATA[VNC]]></TYPE>
    </GRAPHICS>
    <INPUT>
      <BUS><![CDATA[usb]]></BUS>
      <TYPE><![CDATA[tablet]]></TYPE>
    </INPUT>
    <MEMORY><![CDATA[1024]]></MEMORY>
    <NIC>
      <NETWORK><![CDATA[test-vnet]]></NETWORK>
      <NETWORK_UNAME><![CDATA[oneadmin]]></NETWORK_UNAME>
    </NIC>
    <OS>
      <ARCH><![CDATA[x86_64]]></ARCH>
      <BOOT><![CDATA[disk0,disk1]]></BOOT>
    </OS>
    <VCPU><![CDATA[0]]></VCPU>
  </TEMPLATE>
</VMTEMPLATE>

NB: I removed the ACL which gives everybody USE on networks of the cluster, so the user can only USE what I give permissions to.

Regards.

#6 Updated by Abel Coronado over 3 years ago

EOLE Team wrote:

Hello,

A user who has USE on all the VM resources except the network should be able to modify it and instantiate the VM.

This is not the case actually, up to ONE 5.2.1, as you can see in sunstone-no-net-use.png.

Regards.

NB: It applies to both user and cloud views.

Hello,

I have tried it and I think it can be a view thing.

Is network_select on cloud.yaml enabled?

Regards.

#7 Updated by EOLE Team over 3 years ago

Abel Coronado wrote:

EOLE Team wrote:

Hello,

A user who has USE on all the VM resources except the network should be able to modify it and instantiate the VM.

This is not the case actually, up to ONE 5.2.1, as you can see in sunstone-no-net-use.png.

Regards.

NB: It applies to both user and cloud views.

Hello,

I have tried it and I think it can be a view thing.

Is network_select on cloud.yaml enabled?

Yes it is.

I'll try to describe precisely how I setup a new ONE to trigger this error.

Also available in: Atom PDF