[
https://issues.apache.org/jira/browse/CLOUDSTACK-3506?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13722383#comment-13722383
]
Koushik Das commented on CLOUDSTACK-3506:
-----------------------------------------
Looks like the NFS used for testing also has issues. In the secondary store
manually creating a directory using mkdir is resulting in creation with
permission bits set to 0750. In a similar way even when Cloudstack tries
creating directories like volumes etc. in the secondary store the default
permission is set to 0750 on all intermediate directories. This is resulting in
permission issue.
Chandan,
Please verify if you are able to create directories inside your seconadary
store with 0755 permission. If that works and you still see the issue with
template download then reopen.
> Unable to download Volumes on KVM based Setup : 403 Permission Forbidden
> Error is being thrown to the User
> ----------------------------------------------------------------------------------------------------------
>
> Key: CLOUDSTACK-3506
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3506
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Management Server
> Affects Versions: 4.2.0
> Reporter: Chandan Purushothama
> Assignee: Koushik Das
> Priority: Critical
> Fix For: 4.2.0
>
>
> =================
> Steps to Reproduce:
> =================
> 1. Deploy an Advanced Zone - RHEL 6.3 KVM host Setup
> 2. Create a Regular User Account.
> 3. Login to the regular User account
> 4. Create a VPC.
> 5. Deploy a User VM in the VPC with a data disk offering.
> 6. Create files on the data disk
> 7. Detach the data disk
> 8. Click on the download Volume button
> 9. Click on the link displayed to download the Volume.
> 10. Encounter the 403 Permission Forbidden Error.
> ==========
> Observation:
> ==========
> Forbidden
> You don't have permission to access
> /userdata/b1b67090-9794-4858-ae25-6a2cefb7cf6d.qcow2 on this server.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
