Discussion:
[Openstack] Way to see VMs under all tenants by non-admin?
Ken D'Ambrosio
2018-11-26 14:32:51 UTC
Permalink
Hey, all. I've had a request for a non-admin user to see all the VMs
currently running, irrespective of project. I've gone through the
policy.json file (this is Juno) and enabled everything I could think of
that seemed appropriate, to no avail. Is there any way to do this
without granting him flat-out admin?

Thanks!

-Ken
Mohammed Naser
2018-11-26 15:30:47 UTC
Permalink
Hi Ken:

https://github.com/openstack/nova/blob/juno-eol/nova/api/openstack/compute/servers.py#L588-L590

Good luck (with your upgrades ;))

Mohammed
Post by Ken D'Ambrosio
Hey, all. I've had a request for a non-admin user to see all the VMs
currently running, irrespective of project. I've gone through the
policy.json file (this is Juno) and enabled everything I could think of
that seemed appropriate, to no avail. Is there any way to do this
without granting him flat-out admin?
Thanks!
-Ken
_______________________________________________
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
--
Mohammed Naser — vexxhost
-----------------------------------------------------
D. 514-316-8872
D. 800-910-1726 ext. 200
E. ***@vexxhost.com
W. http://vexxhost.com
Ken D'Ambrosio
2018-11-26 16:07:46 UTC
Permalink
Post by Mohammed Naser
https://github.com/openstack/nova/blob/juno-eol/nova/api/openstack/compute/servers.py#L588-L590
OK, I feel kinda dumb, but I never realized I could go and search for
policy.json policy in the pertinent Python files. That's awesome!
Doesn't exactly help me now, but will certainly come in handy in the
future.

Thanks,

-Ken
Post by Mohammed Naser
Good luck (with your upgrades ;))
Mohammed
Post by Ken D'Ambrosio
Hey, all. I've had a request for a non-admin user to see all the VMs
currently running, irrespective of project. I've gone through the
policy.json file (this is Juno) and enabled everything I could think of
that seemed appropriate, to no avail. Is there any way to do this
without granting him flat-out admin?
Thanks!
-Ken
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
--
Mohammed Naser -- vexxhost
-----------------------------------------------------
D. 514-316-8872
D. 800-910-1726 ext. 200
W. http://vexxhost.com [1]
Links:
------
[1] http://vexxhost.com/

Loading...