Datastore.Allocate needed to browse Content (Templates, Backup, etc)?

Discussion in 'Proxmox VE: Installation and configuration' started by kroem, Jan 3, 2019.

  1. kroem

    kroem Member

    Joined:
    Jul 12, 2016
    Messages:
    33
    Likes Received:
    0
    I've discovered that the privilege Datastore.Allocate is needed in role in order to grant a user access/browse Content of a storage? This seems pretty backwards - what does then Datastore.AllocateTemplates do?

    Datastore.Allocate grants users the ability to remove datastores which is not something I need users to be able to do ...
     
  2. proxmox_st

    proxmox_st New Member

    Joined:
    Jan 11, 2019
    Messages:
    5
    Likes Received:
    0
    I'm also encountering this issue. Also, if the user is logged in while the permission is added, the content tab shows up and displays ISOs correctly (but not VM Disks, which is good). However, after a page reload, the content tab is gone.
     
    #2 proxmox_st, Jan 11, 2019
    Last edited: Jan 11, 2019
  3. proxmox_st

    proxmox_st New Member

    Joined:
    Jan 11, 2019
    Messages:
    5
    Likes Received:
    0
    Bumping. How do other people give access to a DS to upload ISOs without having users (be able to) delete the entire datastore?
     
    #3 proxmox_st, Feb 1, 2019
    Last edited: Feb 1, 2019
  4. fabian

    fabian Proxmox Staff Member
    Staff Member

    Joined:
    Jan 7, 2016
    Messages:
    3,183
    Likes Received:
    493
    Datastore.AllocateSpace or Datastore.Audit is enough to list the content, Datastore.Allocate is needed to create/remove/configure storages themselves.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. proxmox_st

    proxmox_st New Member

    Joined:
    Jan 11, 2019
    Messages:
    5
    Likes Received:
    0
    Thanks for the reply. This is what I thought as well from reading the documentation. However, when I create a user with these permissions and select some storage in the storage view, only the "Summary" tab is available.
    Currently running version 5.3-7, in case that's relevant.
     
  6. fabian

    fabian Proxmox Staff Member
    Staff Member

    Joined:
    Jan 7, 2016
    Messages:
    3,183
    Likes Received:
    493
    please file a bug at https://bugzilla.proxmox.com - seems like something is wrong with the capabilities check in the GUI storage tab, which makes the content view hidden. note that you can select/list the templates/isos when creating/editing guests, so it's not the actual backend permission checks that are in the way...
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. proxmox_st

    proxmox_st New Member

    Joined:
    Jan 11, 2019
    Messages:
    5
    Likes Received:
    0
  8. fabian

    fabian Proxmox Staff Member
    Staff Member

    Joined:
    Jan 7, 2016
    Messages:
    3,183
    Likes Received:
    493
    Thanks! Like I said, this is just a bug in the GUI logic deciding which parts of the GUI to enable - the permissions are correct ;)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. proxmox_st

    proxmox_st New Member

    Joined:
    Jan 11, 2019
    Messages:
    5
    Likes Received:
    0
    Right, I noticed that as well, access via the API works correctly. However, we want to allow our users to upload new ISOs to the datastore, which "doesn't work", as far as our users are concerned.
    Thanks for your help!
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice