Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Filter SDs based on the user permission for snapshot memory disk #494

Merged
merged 1 commit into from
Jun 28, 2022

Conversation

liranr23
Copy link
Member

When creating memory disk for live VM snapshot, the engine selects the
storage domain to use. The engine might select a storage domain that the
current user doesn't have permission on. This will fail to add the
memory disk and the snapshot operation will fail.
With this patch, the storage domains will be also filtered based on the
user permission.

Change-Id: Id1a1c529dde795628f214c0c9d9a28efac89eec0
Bug-Url: https://bugzilla.redhat.com/1565183
Signed-off-by: Liran Rotenberg lrotenbe@redhat.com

@liranr23
Copy link
Member Author

We also use this method (without checking the user) in hibernation and ImportVm. I think it may be good for them to be filtered based on the user as well. WDYT?

@liranr23 liranr23 added the virt label Jun 26, 2022
@smelamud smelamud self-requested a review June 26, 2022 23:49
@smelamud
Copy link
Member

We also use this method (without checking the user) in hibernation and ImportVm. I think it may be good for them to be filtered based on the user as well. WDYT?

Would be good, IMHO.

@liranr23 liranr23 force-pushed the snap_mem_permission branch 2 times, most recently from 204e0c1 to a66dd28 Compare June 27, 2022 14:12
@liranr23
Copy link
Member Author

/ost

When creating memory disk for live VM snapshot, the engine selects the
storage domain to use. The engine might select a storage domain that the
current user doesn't have permission on. This will fail to add the
memory disk and the snapshot operation will fail.
With this patch, the storage domains will be also filtered based on the
user permission.

Change-Id: Id1a1c529dde795628f214c0c9d9a28efac89eec0
Bug-Url: https://bugzilla.redhat.com/1565183
Signed-off-by: Liran Rotenberg <lrotenbe@redhat.com>
@ahadas ahadas merged commit b11e94b into oVirt:master Jun 28, 2022
@liranr23 liranr23 deleted the snap_mem_permission branch June 28, 2022 08:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants