Datastore privileges

H

HBO

Active Member
Dec 15, 2014
274
15
38
Germany
Is there any possibility to give customers a "read only" access to any datastore?

Example:
"/storage/backups" created as an nfs mount to save all the backups. Now i want to grant our customers access to this storage to "view" and "restore" a backup, but not to start a backup job or remove existing files. I only find out with "Datastore.Audit" to see the storage but without any view to the content in it or "Datastore.AllocateSpace" with read/write access.

Example 2:
"/storage/iso" created as an local folder to use iso files for cdrom. I know how to grant access to these files, but is there any possibility to grant the customers access to upload their own iso but without delete permission?

Thanks
 
Here is what I've verified through testing:
- Content tab in Storage only shows up with Datastore.Allocate
- Backup content is only listed with Datastore.AllocateSpace+VM.Backup
- Manual API-calls behave the same way.

Altogether this means none of your examples will work for a single storage.
I would setup one storage per customer. Each storage allows both backups and iso.
 
Yes, but it doesn't make any sense to give customers such access, there should some priviliges like:
- show storage
- read files in storage (like restore backups)
- write files in storage (like upload an iso or create an backup)
- delete files in storage (only something for administration)

It makes no sense to create hundrets off storages. Our backups are done via cronjobs with individual safetimes. We can't give any access to our customers because they have the possibility to manual create backups / iso and delete them.

Is there any chance to release such a simple permission thing?
 
You must log in or register to reply here.
Top Bottom