|Summary:||All available permissions are not inherited by a user with multiple roles.|
|Product:||Red Hat Enterprise Virtualization Manager||Reporter:||Ameya Charekar <achareka>|
|Component:||ovirt-engine||Assignee:||nobody nobody <nobody>|
|Status:||CLOSED WONTFIX||QA Contact:||meital avital <mavital>|
|Version:||4.1.6||CC:||achareka, gklein, lsurette, michal.skrivanek, mkalinin, mperina, rbalakri, Rhev-m-bugs, srevivo, tjelinek, ykaul|
|Fixed In Version:||Doc Type:||If docs needed, set a value|
|Doc Text:||Story Points:||---|
|Last Closed:||2018-03-20 18:36:19 UTC||Type:||Bug|
|oVirt Team:||Virt||RHEL 7.3 requirements from Atomic Host:|
|Cloudforms Team:||---||Target Upstream Version:|
Description Ameya Charekar 2017-11-22 19:30:06 UTC
Description of problem: All available permissions are not inherited by a user with multiple roles and user only has least permissions available. How reproducible: Always Steps to Reproduce: 1. Create non-admin user. 2. Add "VMCreator" role to this user for a VM in down state from admin portal (Virtual Machines tab -> Permissions). Login to user portal with this user, "Initial Run" menu is available when we edit VM. 3. Add additional "InstanceCreator" role to this user for this VM from admin portal. Now "Initial Run" menu is no longer available from user portal after login out and login in. Actual results: User has least available permissions i.e. of "InstanceCreator" role. Expected results: User should have highest available permissions i.e. "Initial Run" with above roles. Additional info:
Comment 1 Michal Skrivanek 2017-11-22 21:43:12 UTC
Note the UP is removed in 4.2, and the functionality you describe is not present in the VM Portal.
Comment 9 Marina 2018-03-20 18:36:19 UTC
As I see it, there is only cloud-init part that is missing from the VM Portal now, from the Initial Run dialog. And as the user has enough permissions to login to the Admin Portal, it can be handled there and I am fine not having that functionality exposed to the VM portal and having this bug not relevant. Closing. Thanks everyone!