[one-users] question about ACL with one.image.clone

[Carlos Martín Sánchez]

Hi,

Could you confirm through the CLI that user 3 belongs to group 102?
oneuser list and show will only show the group name, but using the command
'oneuser show 3 -x' you can read the GID element.

Regards.
--
Carlos Martín, MSc
Project Engineer
OpenNebula - The Open-source Solution for Data Center Virtualization
www.OpenNebula.org | cmartin at opennebula.org |
@OpenNebula<http://twitter.com/opennebula><cmartin at opennebula.org>


On Fri, Mar 8, 2013 at 12:58 PM, Nicolas Bélan <nicolas.belan at gmail.com>wrote:

>  Hello everyone,
>
> I am testing OpenNebula Self-Service (v3.8.3 + debian), and acl rules.
>
> I have a little problem using ACLs...
>
> According to documentation
> http://opennebula.org/documentation:rel3.8:api#oneimage :
>   clone  one.image.clone<http://opennebula.org/documentation:rel3.8:api#oneimageclone> IMAGE:CREATE
> IMAGE:USE
> I set my ACL to the following value:
>
> oneadmin at nebula-frontend:~$ oneacl list
>    ID     USER RES_VHNIUTGDCO   RID OPE_UMAC
>     0       @1     V-NI-T----     *     ---c
>     1       @1     -H--------     *     -m--
>     2        *     ---------O     *     ---c
>    48     @102     ---I------  @102     u--c
>    50     @102     --N--T----  @102     u---
>
> Using a UserID with groupIP 102, I am trying to clone an image through
> http://nebula-frontend:4567/ui (button Clone)
> .
> I got the following message:
> [ImageClone] User [3] : Not authorized to perform CREATE IMAGE.
>
> Where am i wrong ?
>
> The original image is UID = 0 but GID = 102.
>
> Thank you for your help :)
>
> Best regards,
> Nicolas.
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opennebula.org/pipermail/users-opennebula.org/attachments/20130308/06592b1c/attachment-0002.htm>