Hi Eli,

I've perused the design and it looks very good for the purpose of adding events 
to the log as back end tasks on the NetApp VSC are started and complete.

I do have one question. As part of the new UI plugin framework that Vojtech is 
working on he added the capability to retrieve a session ID that will be used 
outside of the oVirt engine to invoke REST API calls. I'm assuming this session 
would have the same role as the user that is currently logged in. 

According to the event log design, only the Super user will have permissions to 
add events by default. This would mean that if anyone other than the super user 
is logged in and performing any tasks through the NetApp plugin, the server 
side of the VSC will likely not be able to log events. This could be confusing 
for users as sometimes they see events showing up giving them information on 
the task progress and sometimes they don't depending on the role logged in.

Would it make sense to allow all roles to log events by default? I'm not sure 
what security problems would arise given that it is just a log and they would 
be tagged as external events.

-Chris


-----Original Message-----
From: [email protected] [mailto:[email protected]] On 
Behalf Of Eli Mesika
Sent: Monday, November 19, 2012 7:24 AM
To: engine-devel
Subject: [Engine-devel] Design review summary for 3.2 - adding support for 
External Events

Discussion : http://wiki.ovirt.org/wiki/Talk:ExternalEvents
Updated Design : 
http://wiki.ovirt.org/wiki/Features/Design/DetailedExternalEvents#Future_directions
_______________________________________________
Engine-devel mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-devel
_______________________________________________
Engine-devel mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-devel

Reply via email to