You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "Prachi Damle (JIRA)" <ji...@apache.org> on 2014/04/04 00:55:15 UTC

[jira] [Assigned] (CLOUDSTACK-6332) [Automation] Failed to create PFrule with permission error "does not have permission to perform this operation on these resources on objs"

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-6332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Prachi Damle reassigned CLOUDSTACK-6332:
----------------------------------------

    Assignee: Prachi Damle

> [Automation] Failed to create PFrule with permission error "does not have permission to perform this operation on these resources on objs"
> ------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-6332
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6332
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Management Server
>    Affects Versions: 4.4.0
>         Environment: KVM RHEL 6.3
>            Reporter: Rayees Namathponnan
>            Assignee: Prachi Damle
>            Priority: Blocker
>             Fix For: 4.4.0
>
>         Attachments: CLOUDSTACK-6329.rar
>
>
> Test case integration.component.test_accounts.TestDomainForceRemove.test_forceDeleteDomain failing with latest build
> This test case performing below operations 
> 1540         # Steps for validations
> 1541         # 1. create a domain DOM
> 1542         # 2. create 2 users under this domain
> 1543         # 3. deploy 1 VM into each of these user accounts
> 1544         # 4. create PF / FW rules for port 22 on these VMs for their
> 1545         #    respective accounts
> 1546         # 5. delete the domain with force=true option
> 1547         # Validate the following
> 1548         # 1. listDomains should list the created domain
> 1549         # 2. listAccounts should list the created accounts
> 1550         # 3. listvirtualmachines should show the Running VMs
> 1551         # 4. PF and FW rules should be shown in listFirewallRules
> 1552         # 5. domain should delete successfully and above three list calls
> 1553         #    should show all the resources now deleted. listRouters should
> 1554         #    not return any routers in the deleted accounts/domains
> This test case failing while creating PF rule
> 2014-04-02 17:20:28,092 DEBUG [c.c.a.ApiServlet] (catalina-exec-6:ctx-fef1201e ctx-1aba7046 ctx-c95b5405) ===END===  10.223.2
> 40.194 -- GET  account=test-TestUserLogin-test_forceDeleteDomain-KV543J&domainid=1503a119-b8b8-4ce8-851c-9af1da80dc59&issourc
> enat=True&apiKey=t3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&associatednetworkid=6
> bf99ca0-e6df-40bc-a66f-fe63b57ed8a0&signature=X2GGH%2F2eo7oS87z1ObWRUzbnXqQ%3D&command=listPublicIpAddresses&response=json&li
> stall=True
> 2014-04-02 17:20:28,097 DEBUG [c.c.a.ApiServlet] (catalina-exec-19:ctx-f87f0017) ===START===  10.223.240.194 -- GET  apiKey=t
> 3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&virtualmachineid=ce01d441-d77f-4b5c-8a2
> 3-67f959b330bf&signature=pXyBJU73ioZ%2BNZIe%2Fy%2FIA4Ay9cI%3D&ipaddressid=8b9f259d-f3a3-4060-ae32-6d5c86bcb346&command=create
> PortForwardingRule&privateport=22&protocol=TCP&publicport=22&response=json
> 2014-04-02 17:20:28,124 DEBUG [c.c.u.AccountManagerImpl] (catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) Access to
> {Ip[10.223.122.82-1]} granted to Acct[e77e5066-ddae-4410-8609-4b8e74a984f9-admin] by RoleBasedEntityAccessChecker
> 2014-04-02 17:20:28,127 DEBUG [c.c.a.t.Request] (StatsCollector-1:ctx-44b28c8c) Seq 3-3008686026060202681: Received:  { Ans:
> , MgmtId: 29066118877352, via: 3, Ver: v1, Flags: 10, { GetHostStatsAnswer } }
> 2014-04-02 17:20:28,178 INFO  [c.c.a.ApiServer] (catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) PermissionDenied: Acct[e77e5066-ddae-4410-8609-4b8e74a984f9-admin] does not have permission to perform this operation on these resources on objs: []
> 2014-04-02 17:20:28,178 DEBUG [c.c.a.ApiServlet] (catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) ===END===  10.223.240.194 -- GET  apiKey=t3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&virtualmachineid=ce01d441-d77f-4b5c-8a23-67f959b330bf&signature=pXyBJU73ioZ%2BNZIe%2Fy%2FIA4Ay9cI%3D&ipaddressid=8b9f259d-f3a3-4060-ae32-6d5c86bcb346&command=createPortForwardingRule&privateport=22&protocol=TCP&publicport=22&response=json



--
This message was sent by Atlassian JIRA
(v6.2#6252)