[one-users] ACLs and users authentification

[Carlos Martín Sánchez]

Hi,

That's not the normal behaviour, you may have changed some configuration
during your tests.
ACL rules in OpenNebula only add permissions, there is no option to make
other resources invisible, because by default they are.

Users can only list the resources they have USE permissions over. If your
users can list VMs from other group, it is because you have an ACL that
allows it, or because you changed the VM permissions to allow USE to
'others', see [1].

If you need more specific help, please include the output of oneacl list.

Regards,
Carlos

[1] http://opennebula.org/documentation:rel3.6:chmod
--
Carlos Martín, MSc
Project Engineer
OpenNebula - The Open-source Solution for Data Center Virtualization
www.OpenNebula.org | cmartin at opennebula.org |
@OpenNebula<http://twitter.com/opennebula><cmartin at opennebula.org>



On Wed, Sep 5, 2012 at 3:37 PM, Пярн Артур <dekkart at yandex.ru> wrote:

> Hi
>
> I'm testing opennebula in multi-tenant envirements and found an upsetting
> issue.
> When i put users in groups (for example company A and company B groups), i
> can't find anything in options and in documentation (ACLs, etc.) to make
> company A VMs invisible to company B VMs and opposite.
> They just can't do anything with not their own machines, but the still see
> all the pool of virtual machines. This is not good in such case.
> I will be pleased to hear any advice.
>
> Thank you in advance.
>
> --
> Regards,
> Artur Pyarn
>
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20120905/fb1279a2/attachment-0002.htm>