Request #5062
Instantiate a VM should permit to change the network when user has no USE on the one defined in the template
Status: | Closed | Start date: | 03/15/2017 | |
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | - | % Done: | 0% | |
Category: | Sunstone | |||
Target version: | - | |||
Pull request: |
Description
Hello,
A user who has USE on all the VM resources except the network should be able to modify it and instantiate the VM.
This is not the case actually, up to ONE 5.2.1, as you can see in sunstone-no-net-use.png.
Regards.
NB: It applies to both user and cloud views.
History
#1 Updated by Ruben S. Montero over 4 years ago
The template can be modified at instantiation. The user should remove the NIC attached to the unauthorized network and add a new one to a network the user can access to.
So, if understand correctly this is already implemented. Closing, we can reopen if needed
#2 Updated by Ruben S. Montero over 4 years ago
- Status changed from Pending to Closed
#3 Updated by EOLE Team over 4 years ago
Ruben S. Montero wrote:
The template can be modified at instantiation. The user should remove the NIC attached to the unauthorized network and add a new one to a network the user can access to.
No, as you can see on the screen shot, no information is provided when the template is selected, only an error message.
The use can not remove the NIC attached to the unauthorized network nor add a new one.
Regards.
#4 Updated by Ruben S. Montero over 4 years ago
- File 2017-03-23-155859_941x1033_scrot.png added
mm, I've uploaded an screenshot, and the parameters I can update. Can I have the output of onetemplate show -x InstallEole-2.6.0-amd64?
(BTW; the VMGroup is for the 5.4 upcoming version but the basic code for update is the same in 5.2)
#5 Updated by EOLE Team over 4 years ago
Ruben S. Montero wrote:
mm, I've uploaded an screenshot, and the parameters I can update. Can I have the output of onetemplate show -x InstallEole-2.6.0-amd64?
<VMTEMPLATE> <ID>1</ID> <UID>0</UID> <GID>0</GID> <UNAME>oneadmin</UNAME> <GNAME>oneadmin</GNAME> <NAME>InstallEole-2.6.0-amd64</NAME> <PERMISSIONS> <OWNER_U>1</OWNER_U> <OWNER_M>1</OWNER_M> <OWNER_A>0</OWNER_A> <GROUP_U>1</GROUP_U> <GROUP_M>0</GROUP_M> <GROUP_A>0</GROUP_A> <OTHER_U>1</OTHER_U> <OTHER_M>0</OTHER_M> <OTHER_A>0</OTHER_A> </PERMISSIONS> <REGTIME>1482240069</REGTIME> <TEMPLATE> <CPU><![CDATA[0.2]]></CPU> <DESCRIPTION><![CDATA[Modèle de VM permettant d'installer un module EOLE 2.6.0 64 bits (non persistente)]]></DESCRIPTION> <DISK> <DEV_PREFIX><![CDATA[vd]]></DEV_PREFIX> <DRIVER><![CDATA[qcow2]]></DRIVER> <IMAGE><![CDATA[DSK-50-Go]]></IMAGE> <IMAGE_UNAME><![CDATA[oneadmin]]></IMAGE_UNAME> </DISK> <DISK> <DEV_PREFIX><![CDATA[hd]]></DEV_PREFIX> <DRIVER><![CDATA[raw]]></DRIVER> <IMAGE><![CDATA[ISO-Eole-2.6.0-amd64]]></IMAGE> <IMAGE_UNAME><![CDATA[eoleone]]></IMAGE_UNAME> </DISK> <FEATURES> <ACPI><![CDATA[yes]]></ACPI> <PAE><![CDATA[no]]></PAE> </FEATURES> <GRAPHICS> <KEYMAP><![CDATA[fr]]></KEYMAP> <LISTEN><![CDATA[0.0.0.0]]></LISTEN> <TYPE><![CDATA[VNC]]></TYPE> </GRAPHICS> <INPUT> <BUS><![CDATA[usb]]></BUS> <TYPE><![CDATA[tablet]]></TYPE> </INPUT> <MEMORY><![CDATA[1024]]></MEMORY> <NIC> <NETWORK><![CDATA[test-vnet]]></NETWORK> <NETWORK_UNAME><![CDATA[oneadmin]]></NETWORK_UNAME> </NIC> <OS> <ARCH><![CDATA[x86_64]]></ARCH> <BOOT><![CDATA[disk0,disk1]]></BOOT> </OS> <VCPU><![CDATA[0]]></VCPU> </TEMPLATE> </VMTEMPLATE>
NB: I removed the ACL which gives everybody USE
on networks of the cluster, so the user can only USE
what I give permissions to.
Regards.
#6 Updated by Abel Coronado over 4 years ago
- File Screenshot from 2017-03-28 11-27-45.png added
EOLE Team wrote:
Hello,
A user who has USE on all the VM resources except the network should be able to modify it and instantiate the VM.
This is not the case actually, up to ONE 5.2.1, as you can see in sunstone-no-net-use.png.
Regards.
NB: It applies to both user and cloud views.
Hello,
I have tried it and I think it can be a view thing.
Is network_select on cloud.yaml enabled?
Regards.
#7 Updated by EOLE Team over 4 years ago
Abel Coronado wrote:
EOLE Team wrote:
Hello,
A user who has USE on all the VM resources except the network should be able to modify it and instantiate the VM.
This is not the case actually, up to ONE 5.2.1, as you can see in sunstone-no-net-use.png.
Regards.
NB: It applies to both user and cloud views.
Hello,
I have tried it and I think it can be a view thing.
Is network_select on cloud.yaml enabled?
Yes it is.
I'll try to describe precisely how I setup a new ONE to trigger this error.