Bug #5206

MANAGE right requirement on image for disk snapshot unjustified with ceph

Added by Arnaud Abélard about 4 years ago. Updated over 3 years ago.

Status:PendingStart date:06/28/2017
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Core & System
Target version:Release 5.6
Resolution: Pull request:
Affected Versions:OpenNebula 5.2

Description

Hello,

With opennebula 5.2, snapshoting a disk requires the MANAGE permissions on the original image. While it might be required for some storage driver, it's not with ceph. Since the volume used by the VM is a rbd clone of the original image, the rbd snapshot only requires read permissions on the original image (which is implicit since the volume the user is trying to snapshot has already be cloned from the image, the user already has read permissions on the original image).

History

#1 Updated by Ruben S. Montero over 3 years ago

  • Category set to Core & System
  • Target version set to Release 5.6

This should be the case for persistent images, it seems that this check es performed always.

Also available in: Atom PDF