[
https://issues.apache.org/jira/browse/CLOUDSTACK-3506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13722278#comment-13722278
]
Koushik Das commented on CLOUDSTACK-3506:
-----------------------------------------
Inside /var/www/html/userdata folder in the SSVM a link gets created for
downloading the volume. This link points to the actual .vhd that gets created
in secondary storage. Now the 403 error is seen as the folders in the secondary
store doesn't have executable permission for world. Any webserver needs this to
allow access to a file. Note that the file that is being accessed needs a read
permission only to be accessible but the folders leading to it should all have
world executable.
One quick workaound is to run the following cmd on the seconadry store root
chmod -R +x
> Unable to download Volumes on KVM based Setup : 403 Permission Forbidden
> Error is being thrown to the User
> ----------------------------------------------------------------------------------------------------------
>
> Key: CLOUDSTACK-3506
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3506
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Management Server
> Affects Versions: 4.2.0
> Reporter: Chandan Purushothama
> Assignee: Koushik Das
> Priority: Critical
> Fix For: 4.2.0
>
>
> =================
> Steps to Reproduce:
> =================
> 1. Deploy an Advanced Zone - RHEL 6.3 KVM host Setup
> 2. Create a Regular User Account.
> 3. Login to the regular User account
> 4. Create a VPC.
> 5. Deploy a User VM in the VPC with a data disk offering.
> 6. Create files on the data disk
> 7. Detach the data disk
> 8. Click on the download Volume button
> 9. Click on the link displayed to download the Volume.
> 10. Encounter the 403 Permission Forbidden Error.
> ==========
> Observation:
> ==========
> Forbidden
> You don't have permission to access
> /userdata/b1b67090-9794-4858-ae25-6a2cefb7cf6d.qcow2 on this server.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
