[one-users] Authorization for files datastore

Jacek Jarosiewicz nebula at supermedia.pl
Thu Jun 6 05:01:16 PDT 2013


that's a question for the developers of opennebula.

I'm just a user :)

Cheers,
J

On 06/06/2013 01:21 PM, Steffen Claus wrote:
> Hi,
> thanx for you reply - your suggestion worked!
>
> But as the image name is correct and recognized whenever I instantiate the template with the other user (the one that owns the file in the files datastore) it still looks like a bug to me.
>
> BR,
> Steffen
>
> ----- Ursprüngliche Mail -----
>> Hi,
>>
>> This looks like a problem with identifying image by oned, not like a
>> problem with permissions.
>>
>> try: $FILE[IMAGE_ID=<ID>]
>>
>> You can obtain image id from `oneimage list' command
>>
>> Cheers,
>> J
>>
>> On 06/06/2013 12:27 PM, Steffen Claus wrote:
>>> Dear all,
>>> I have a question regarding the authorization procedure for using
>>> files within a template.
>>>
>>> There are two users within the same group.
>>> One user uploads a file to the files datastore.
>>> The other user tries to instantiate a template that uses the
>>> aforementioned file within the CONTEXT.
>>>
>>> No matter how unrestricted I design the ACLS (allow everything on
>>> the file itself & global ACL for "Documents" resources), it seems
>>> like only the owner of the file can use it within a template.
>>>
>>> --> Error message:
>>>
>>> "[TemplateInstantiate] Error allocating a new virtual machine.
>>> Error parsing: $FILE[IMAGE="test"].
>>> Cannot get image (check name/ID or try IMAGE_UNAME or IMAGE_UID)."
>>>
>>> Is this an expected behaviour/security feature?
>>> How are the ACLs supposed to look like?
>>>
>>> BR,
>>> Steffen
>>>
>>>
>>
>>
>> --
>> Jacek Jarosiewicz
>>
>


-- 
Jacek Jarosiewicz



More information about the Users mailing list