<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On 27 November 2013 16:19, Stefan Kooman <span dir="ltr"><<a href="mailto:stefan@bit.nl" target="_blank">stefan@bit.nl</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div class="im">Quoting Daniel Molina (<a href="mailto:dmolina@opennebula.org">dmolina@opennebula.org</a>):<br>
> Hi Stefan,<br>
><br>
><br>
> On 27 November 2013 14:03, Stefan Kooman <<a href="mailto:stefan@bit.nl">stefan@bit.nl</a>> wrote:<br>
><br>
> > Hi,<br>
> ><br>
> > I made a priviliged user (member of oneadmin group) but this user is<br>
> > unable to see users / groups / ACLs or any other resource that needs<br>
> > more than default priviliges in sunstone. Testing this on 4.3.90. Can<br>
> > someone re-produce this behaviour?<br>
> ><br>
><br>
> Could you check this user is using the admin view, you can change the view<br>
> from the settings dialog clicking in the top right corner of sunstone.<br>
><br>
> If you didn't change the configuration in ''/etc/one/sunstone-views.yaml'',<br>
> users in the oneadmin group should be able to use any view:<br>
><br>
> groups:<br>
> oneadmin:<br>
> - admin<br>
> - vdcadmin<br>
> - user<br>
> - cloud<br>
><br>
> Cheers<br>
</div>If have pinpointed the issue and found a "workaround". It doesn't need<br>
to be a "privileged" user. Any new user that has appropriate permissions<br>
is _unable_ to see any resources. If, however, the user updates it's<br>
config (settings -> update config) he _is_ able to see al the resources<br>
all of the sudden. The difference between "before" and "after" this<br>
change is the following:<br>
<br>
The user has the following extra attributes:<br>
<br>
DEFAULT_VIEW<br>
LANG<br>
TABLE_ORDER<br>
VNC_WSS<br>
<br>
What kind of magic happens when a user applies "update config"?<br></blockquote><div><br></div><div>After updating the config this variable is populated based on the select option:</div><div><div> session[:default_view] = user['TEMPLATE/DEFAULT_VIEW']</div>
</div><div><br></div><div>Otherwise the default_view is generated form the username and group:</div><div> session[:default_view] = $views_config.available_views(session[:user], session[:user_gname]).first<br></div><div>
<br></div><div>And the available views will return the first view if there is any defined for the user or group or the default one from ''/etc/one/sunstone-views.yaml'':</div><div><div> def available_views(user_name, group_name)</div>
<div> available_views = @views_config['users'][user_name] if @views_config['users']</div><div> available_views ||= @views_config['groups'][group_name] if @views_config['groups']</div>
<div> available_views ||= @views_config['default']</div><div><br></div><div> return available_views</div><div> end</div></div><div><br></div><div>Therefore, "update config" should not be required using the the default config files</div>
<div><br></div><div>In this guide, it's explained how to change the views for each user/groups</div><div><a href="http://opennebula.org/documentation:rel4.4:suns_views#configuring_access_to_the_views">http://opennebula.org/documentation:rel4.4:suns_views#configuring_access_to_the_views</a><br>
</div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div class=""><div class="h5"><br>
Gr. Stefan<br>
<br>
<br>
<br>
<br>
--<br>
| BIT BV <a href="http://www.bit.nl/" target="_blank">http://www.bit.nl/</a> Kamer van Koophandel 09090351<br>
| GPG: 0xD14839C6 <a href="tel:%2B31%20318%20648%20688" value="+31318648688">+31 318 648 688</a> / <a href="mailto:info@bit.nl">info@bit.nl</a><br>
</div></div><br>-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.10 (GNU/Linux)<br>
<br>
iF4EAREIAAYFAlKWDWQACgkQTyGgYdFIOcZXHQEAwqwZVMm5d2YZtAKwYjJ+ezfs<br>
dXJjUS6IInmH4UGNC14A/0Hp0CPOHHR3MH/xY84Vjh0p0hvZXsdeuXZvXAmPBLye<br>
=gzne<br>
-----END PGP SIGNATURE-----<br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>--<br></div>Daniel Molina<br>Project Engineer<br>OpenNebula - Flexible Enterprise Cloud Made Simple<br><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a> | @OpenNebula</div>
</div></div>