Problem with PDM Administrator User

[bOLEMO]

Greetings,

First, thank you for PDM, this is a great and useful idea!

I tried it since the alpha release, but I have an issue that still persists in the beta. I believe it is a bug, but I might be doing something wrong.

The issue is very specific and is only affecting the Dashboard: Guests With the Highest CPU Usage, Nodes With the Highest CPU Usage, Nodes With the Highest Memory Usage panels and the section SDN: EVPN , returning an api error (status = 403: permission check failed). All the rest works fine.


When I am logged-in as root@pdm, I don't have the issue, the three panels mentioned above in the Dashboard show statistics, and the EVPN page are not returning the error.

But I have the issue when I am logged as my user @pdm (user having all permissions and propagation on / as an Administrator).




This is very specific as I mentioned, as other statistics, and clicking on Remotes clusters pages (as pdm user) is showing all nodes and VMs and stats without issues.


The access to the cluster is using a PVE user with all permissions.




On the PDM device, in the logs, I don't find anything related to these 403:

• nginx logs (for the reverse proxy) only shows GET /api2/extjs/nodes/localhost/tasks… and GET /api2/extjs/remote-tasks/list… returning HTTP 200, no errors.
• proxmox-datacenter-api.service and proxmox-datacenter-privileged-api.service show no errors.

Thank you for looking into this.
Regards,

Gabriel

 

[shanv]

Hi @bOLEMO, the first issue you mentioned, where the dashboard stats remains inaccessible even after permissions are granted, is already being tracked here: ticket.

 

[sebastien.foucou]

Hello,
I installed PDM with the latest ISO available on your site and updated it (apt update/upgrade).

I'm currently having the same API issue with Realm PDM or LDAP administrator accounts.

I'd like to know when you plan to release the patch (https://bugzilla.proxmox.com/show_bug.cgi?id=6794), please, because I don't know how to apply it manually.

Thank you in advance

Sincerely,

 

[shanv]

Hi @sebastien.foucou , We're unable to provide an estimated timeline for the patch release at this point. However, you can subscribe to the Bugzilla ticket to receive immediate notification once the patch becomes available in our repository.

 

[bOLEMO]

I added today a PBS remote, and I noticed the same problem occurs there (all ok if I am root@pam):

 

[shanv]

Hi @bOLEMO , I believe, the above remote overview error and the EVPN error needs to be handled in another ticket. Can you please raise the issue at our bugzilla ( https://bugzilla.proxmox.com/enter_bug.cgi?product=pdm). Please also attatch the above screenshots as well. Thank You!

 

[bOLEMO]

Hi @bOLEMO , I believe, the above remote overview error and the EVPN error needs to be handled in another ticket. Can you please raise the issue at our bugzilla ( https://bugzilla.proxmox.com/enter_bug.cgi?product=pdm). Please also attatch the above screenshots as well. Thank You!

Done: https://bugzilla.proxmox.com/show_bug.cgi?id=6901

Thank you.