Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.

Bug 1516510

Summary: All available permissions are not inherited by a user with multiple roles.
Product: Red Hat Enterprise Virtualization Manager Reporter: Ameya Charekar <achareka>
Component: ovirt-engineAssignee: nobody nobody <nobody>
Status: CLOSED WONTFIX QA Contact: meital avital <mavital>
Severity: low Docs Contact:
Priority: unspecified    
Version: 4.1.6CC: achareka, gklein, lsurette, michal.skrivanek, mkalinin, mperina, rbalakri, Rhev-m-bugs, srevivo, tjelinek, ykaul
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-03-20 18:36:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Ameya Charekar 2017-11-22 19:30:06 UTC
Description of problem:

All available permissions are not inherited by a user with multiple roles and user only has least permissions available.

How reproducible:

Steps to Reproduce:
1. Create non-admin user.

2. Add "VMCreator" role to this user for a VM in down state from admin portal (Virtual Machines tab -> Permissions). Login to user portal with this user, "Initial Run" menu is available when we edit VM.

3. Add additional "InstanceCreator" role to this user for this VM from admin portal. Now "Initial Run" menu is no longer available from user portal after login out and login in.

Actual results:
User has least available permissions i.e. of "InstanceCreator" role.

Expected results:
User should have highest available permissions i.e. "Initial Run" with above roles.

Additional info:

Comment 1 Michal Skrivanek 2017-11-22 21:43:12 UTC
Note the UP is removed in 4.2, and the functionality you describe is not present in the VM Portal.

Comment 9 Marina 2018-03-20 18:36:19 UTC
As I see it, there is only cloud-init part that is missing from the VM Portal now, from the Initial Run dialog. And as the user has enough permissions to login to the Admin Portal, it can be handled there and I am fine not having that functionality exposed to the VM portal and having this bug not relevant. Closing. 
Thanks everyone!