From users-return-33775-apmail-cloudstack-users-archive=cloudstack.apache.org@cloudstack.apache.org Fri Nov 22 00:12:15 2019 Return-Path: X-Original-To: apmail-cloudstack-users-archive@www.apache.org Delivered-To: apmail-cloudstack-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by minotaur.apache.org (Postfix) with SMTP id 3F898191E0 for ; Fri, 22 Nov 2019 00:12:15 +0000 (UTC) Received: (qmail 59353 invoked by uid 500); 22 Nov 2019 00:12:12 -0000 Delivered-To: apmail-cloudstack-users-archive@cloudstack.apache.org Received: (qmail 59329 invoked by uid 500); 22 Nov 2019 00:12:12 -0000 Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cloudstack.apache.org Delivered-To: mailing list users@cloudstack.apache.org Received: (qmail 59315 invoked by uid 99); 22 Nov 2019 00:12:11 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 22 Nov 2019 00:12:11 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id E7DABC1BB4 for ; Fri, 22 Nov 2019 00:12:10 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-he-de.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id z_pADPmWvWZG for ; Fri, 22 Nov 2019 00:12:09 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a00:1450:4864:20::52f; helo=mail-ed1-x52f.google.com; envelope-from=luganofer@gmail.com; receiver= Received: from mail-ed1-x52f.google.com (mail-ed1-x52f.google.com [IPv6:2a00:1450:4864:20::52f]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 1ED2A7DD7F for ; Fri, 22 Nov 2019 00:12:08 +0000 (UTC) Received: by mail-ed1-x52f.google.com with SMTP id p59so4410051edp.7 for ; Thu, 21 Nov 2019 16:12:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=bjXLJW2+IG5fUPcrSGvYNLJy1WWsVwZ7RYIvtguIJqM=; b=ishI7d6UT/z8izcThw/44bE/QE3sfC57ddJabgTLBUdWbnOfXh2hP6qymuVh0Ve+x5 cdc1uVL09GVDW+mnBdBQU4P82lvQqG0+b0g1+T3Zif86e5LPlBF8HyshwRIck/gabU3D RVmuCApzTgsRQBxCHW0BDmlg0TnFMk+4NF4pZcFSFKWa2JeR1uITr3k7He4LcfGnqc8N nMPBV1nCFefMRbjr0Z5V+ieo+gwXJMXkJF3WRl/Tu8IA3fbIqkfZC/ZuodSRGxxVl9Pl PhjvdPTi4UJX84RWXQXiXUikDujNzUVo28Sbo48rLBJu+kiBbWqL+JX3wR/ShpQs62ZY KCHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=bjXLJW2+IG5fUPcrSGvYNLJy1WWsVwZ7RYIvtguIJqM=; b=L9QxqlwHaEQu5KpVcWhHHnv3hz39sqJIZSE5gnSl0ztqiU2PbNqol4MENRHqheW9m/ 813HiE2iOJKZBQdc8sbp0G71blZ0dvAwYgLFXvX4dZ2OVWlG6mwv0azgHYGftem6umgS pcN+VFpGRwZVtzliPZ6HBpm0dKGPyRdvBLHhWOZXx5rgWUb0Qvxn9yIYIvoXDihoHmKa IYiFOnpZWutiVoYQLXvMDmwroQvB6UofI0x+M1jzq5kk9gYYfMVhMsCMCbfVe3neuXmY lxOaatNQZjQXD65/wCT1tcl2OVkPkleC6//I4CSgrD5UmZtn0aFedO00NZj9tfkkqePh rltA== X-Gm-Message-State: APjAAAXN/SjCvu5kG9IbkafAMPthfYAXwqV5QJaJyqlinXOrLfxHDu9L nKEj72eEbG1+YQOyp29s8y3G1UZxynXFTNltku26NZYr0YA= X-Google-Smtp-Source: APXvYqxmMKLZC/H+igWHRRKNUFW+S/H+PMoiGTQbmRfPON/5Pddo6obQfrtabxNwai4ShnrCeDluFz4Z3h/djcv81iE= X-Received: by 2002:a17:906:f255:: with SMTP id gy21mr17916066ejb.204.1574381528138; Thu, 21 Nov 2019 16:12:08 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Fernando Alvarez Date: Thu, 21 Nov 2019 21:11:55 -0300 Message-ID: Subject: Re: Create new role Domain Admin + VR Access To: users@cloudstack.apache.org Content-Type: multipart/alternative; boundary="000000000000b9ca200597e4430b" --000000000000b9ca200597e4430b Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Daan, Thank you for you quick response and sorry for this late reply. The answer to your question is yes, I woud like to give an extra UI access to "virtual appliance" flap but I was not sure if it was a permission setting issue or somethings else (thanks for clarifying it to me). On the other hand, I don't know where to start in order to make that tab visible only to certain user that I want (Contributions are Welcome!) Thank you so much. Fernando. El mar., 19 nov. 2019 a las 14:15, Daan Hoogland (= ) escribi=C3=B3: > Fernando, > Do you mean you want to give extra UI access or just the API? As you show= ed > the API access is the same already, but that does not change the UI and > shows extra tabs or so, You'll need to hack the javascript to have tabs > hidden or visible other than the defaults. (also I'd say upgrade from 4.9 > if you can) > > On Sun, Nov 17, 2019 at 8:54 PM Fernando Alvarez > wrote: > > > Hi everyone, > > > > I need to create a new role like Domain Admin role plus access to > "virtual > > appliance" flap in network domain menu. > > No access to "Infrastructure" and "Global Settings" (is for level 2 > support > > area). > > I tried comparing the list of permissions of the "Domain Admin" and > > "Resource Admin" role related to the virtual router but I can't find a > > difference between them: > > > > (Arsat-Prod) =F0=9F=90=B5 > list rolepermissions | grep -i router > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4b6d38-8ba3-11e7-b03c-7e6885= eea84b,changeServiceForRouter,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c32696d-8ba3-11e7-b03c-7e6885= eea84b,changeServiceForRouter,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4bb89f-8ba3-11e7-b03c-7e6885= eea84b,configureVirtualRouterElement,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c32d222-8ba3-11e7-b03c-7e6885= eea84b,configureVirtualRouterElement,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c4f4f0b-8ba3-11e7-b03c-7e6885= eea84b,createVirtualRouterElement,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c36c75f-8ba3-11e7-b03c-7e6885= eea84b,createVirtualRouterElement,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c537adc-8ba3-11e7-b03c-7e6885= eea84b,destroyRouter,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c3b0202-8ba3-11e7-b03c-7e6885= eea84b,destroyRouter,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5a308f-8ba3-11e7-b03c-7e6885= eea84b,listRouters,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c41f14c-8ba3-11e7-b03c-7e6885= eea84b,listRouters,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5b7a4a-8ba3-11e7-b03c-7e6885= eea84b,listVirtualRouterElements,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c439b01-8ba3-11e7-b03c-7e6885= eea84b,listVirtualRouterElements,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5cca93-8ba3-11e7-b03c-7e6885= eea84b,rebootRouter,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c44f5d3-8ba3-11e7-b03c-7e6885= eea84b,rebootRouter,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5e7590-8ba3-11e7-b03c-7e6885= eea84b,startRouter,allow > > Domain > > > > > Admin,bdb84ac5-8b90-11e7-b03c-7e6885eea84b,0c5e96a1-8ba3-11e7-b03c-7e6885= eea84b,stopRouter,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c46c127-8ba3-11e7-b03c-7e6885= eea84b,startRouter,allow > > Resource > > > > > Admin,bdb82cbb-8b90-11e7-b03c-7e6885eea84b,0c46e5a0-8ba3-11e7-b03c-7e6885= eea84b,stopRouter,allow > > > > Currently I'm usign cloudstack 4.9.3.1. > > > > It's possible to create this new role? > > > > Thanks in advance. > > > > -- > > Fernando. > > > > > -- > Daan > --=20 Fernando Alvarez. --000000000000b9ca200597e4430b--