Rayees Namathponnan created CLOUDSTACK-6332:
-----------------------------------------------
Summary: [Automation] Failed to create PFrule with permission
error "does not have permission to perform this operation on these resources on
objs"
Key: CLOUDSTACK-6332
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6332
Project: CloudStack
Issue Type: Bug
Security Level: Public (Anyone can view this level - this is the default.)
Components: Management Server
Affects Versions: 4.4.0
Environment: KVM RHEL 6.3
Reporter: Rayees Namathponnan
Priority: Blocker
Fix For: 4.4.0
Test case
integration.component.test_accounts.TestDomainForceRemove.test_forceDeleteDomain
failing with latest build
This test case performing below operations
1540 # Steps for validations
1541 # 1. create a domain DOM
1542 # 2. create 2 users under this domain
1543 # 3. deploy 1 VM into each of these user accounts
1544 # 4. create PF / FW rules for port 22 on these VMs for their
1545 # respective accounts
1546 # 5. delete the domain with force=true option
1547 # Validate the following
1548 # 1. listDomains should list the created domain
1549 # 2. listAccounts should list the created accounts
1550 # 3. listvirtualmachines should show the Running VMs
1551 # 4. PF and FW rules should be shown in listFirewallRules
1552 # 5. domain should delete successfully and above three list calls
1553 # should show all the resources now deleted. listRouters should
1554 # not return any routers in the deleted accounts/domains
This test case failing while creating PF rule
2014-04-02 17:20:28,092 DEBUG [c.c.a.ApiServlet] (catalina-exec-6:ctx-fef1201e
ctx-1aba7046 ctx-c95b5405) ===END=== 10.223.2
40.194 -- GET
account=test-TestUserLogin-test_forceDeleteDomain-KV543J&domainid=1503a119-b8b8-4ce8-851c-9af1da80dc59&issourc
enat=True&apiKey=t3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&associatednetworkid=6
bf99ca0-e6df-40bc-a66f-fe63b57ed8a0&signature=X2GGH%2F2eo7oS87z1ObWRUzbnXqQ%3D&command=listPublicIpAddresses&response=json&li
stall=True
2014-04-02 17:20:28,097 DEBUG [c.c.a.ApiServlet]
(catalina-exec-19:ctx-f87f0017) ===START=== 10.223.240.194 -- GET apiKey=t
3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&virtualmachineid=ce01d441-d77f-4b5c-8a2
3-67f959b330bf&signature=pXyBJU73ioZ%2BNZIe%2Fy%2FIA4Ay9cI%3D&ipaddressid=8b9f259d-f3a3-4060-ae32-6d5c86bcb346&command=create
PortForwardingRule&privateport=22&protocol=TCP&publicport=22&response=json
2014-04-02 17:20:28,124 DEBUG [c.c.u.AccountManagerImpl]
(catalina-exec-19:ctx-f87f0017 ctx-8fe3f5ba ctx-36cd4126) Access to
{Ip[10.223.122.82-1]} granted to
Acct[e77e5066-ddae-4410-8609-4b8e74a984f9-admin] by RoleBasedEntityAccessChecker
2014-04-02 17:20:28,127 DEBUG [c.c.a.t.Request] (StatsCollector-1:ctx-44b28c8c)
Seq 3-3008686026060202681: Received: { Ans:
, MgmtId: 29066118877352, via: 3, Ver: v1, Flags: 10, { GetHostStatsAnswer } }
2014-04-02 17:20:28,178 INFO [c.c.a.ApiServer] (catalina-exec-19:ctx-f87f0017
ctx-8fe3f5ba ctx-36cd4126) PermissionDenied:
Acct[e77e5066-ddae-4410-8609-4b8e74a984f9-admin] does not have permission to
perform this operation on these resources on objs: []
2014-04-02 17:20:28,178 DEBUG [c.c.a.ApiServlet] (catalina-exec-19:ctx-f87f0017
ctx-8fe3f5ba ctx-36cd4126) ===END=== 10.223.240.194 -- GET
apiKey=t3Wyi-p5OTh1n5J_y-x8QpwEqHpnyde1729HI5LLHvH5Bd4XU5nEg5n7i6xOIhZOECZ3KcKYnakvdI5hkneqrg&virtualmachineid=ce01d441-d77f-4b5c-8a23-67f959b330bf&signature=pXyBJU73ioZ%2BNZIe%2Fy%2FIA4Ay9cI%3D&ipaddressid=8b9f259d-f3a3-4060-ae32-6d5c86bcb346&command=createPortForwardingRule&privateport=22&protocol=TCP&publicport=22&response=json
--
This message was sent by Atlassian JIRA
(v6.2#6252)
