[one-users] question about ACL with one.image.clone

[Nicolas Bélan]

Hello everyone,

I am testing OpenNebula Self-Service (v3.8.3 + debian), and acl rules.

I have a little problem using ACLs...

According to documentation
http://opennebula.org/documentation:rel3.8:api#oneimage :
clone 	one.image.clone
<http://opennebula.org/documentation:rel3.8:api#oneimageclone>
IMAGE:CREATE
IMAGE:USE


I set my ACL to the following value:

oneadmin at nebula-frontend:~$ oneacl list
   ID     USER RES_VHNIUTGDCO   RID OPE_UMAC
    0       @1     V-NI-T----     *     ---c
    1       @1     -H--------     *     -m--
    2        *     ---------O     *     ---c
   48     @102     ---I------  @102     u--c
   50     @102     --N--T----  @102     u---

Using a UserID with groupIP 102, I am trying to clone an image through
http://nebula-frontend:4567/ui (button Clone)
.
I got the following message:
[ImageClone] User [3] : Not authorized to perform CREATE IMAGE.

Where am i wrong ?

The original image is UID = 0 but GID = 102.

Thank you for your help :)

Best regards,
Nicolas.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20130308/1dbde41b/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4474 bytes
Desc: Signature cryptographique S/MIME
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20130308/1dbde41b/attachment-0001.bin>