Re: [Openstack] swift containers panel permissions?

2013-03-14 Thread Gareth
thanks for your cases


On Wed, Mar 13, 2013 at 10:48 PM, Wyllys Ingersoll 
wyllys.ingers...@evault.com wrote:


 On Mar 12, 2013, at 6:56 PM, Kieran Spear kisp...@gmail.com wrote:

  Hi Wyllys,
 
  On 13 March 2013 04:19, Wyllys Ingersoll wyllys.ingers...@evault.com
 wrote:
  Can someone point me to docs describing how to add/modify/delete
 permissions for a horizon panel?
 
  I want a non-admin user to be able to access the Swift object-store
 containers panel in horizon.  Currently, the containers panel.py has the
 permissions set to:
 permissions = ('openstack.services.object-store',),
 
  Only users with Admin role seem to have access to this panel.  Can
 this be changed, and if so, where do I look to make the changes?
 
  This permission comes from your keystone service catalog. If you have
  an object-store entry in your catalog, then all users should see
  this.


 I figured it out.  The swift proxy-config had the following entry:

 [filter:keystoneauth]
 use = egg:swift#keystoneauth
 operator_roles = admin, swiftoperator

 But I did not have any swift operator role defined. I must have
 cut-and-pasted that entry from an online guide somewhere.  I changed
 swiftoperator to Member and now the non-admin users can access the
 container information.

 thanks,
 -Wyllys




 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp




-- 
Gareth
*Cloud Computing, Openstack, Fitness, Basketball
*
*Novice Openstack contributer*
*My promise: if you find any spelling or grammar mistake in my email from
Mar 1 2013, notice me *
*and I'll donate 1$ or 1¥ to open organization specified by you.*
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] swift containers panel permissions?

2013-03-13 Thread Wyllys Ingersoll

On Mar 12, 2013, at 6:56 PM, Kieran Spear kisp...@gmail.com wrote:

 Hi Wyllys,
 
 On 13 March 2013 04:19, Wyllys Ingersoll wyllys.ingers...@evault.com wrote:
 Can someone point me to docs describing how to add/modify/delete permissions 
 for a horizon panel?
 
 I want a non-admin user to be able to access the Swift object-store 
 containers panel in horizon.  Currently, the containers panel.py has the 
 permissions set to:
permissions = ('openstack.services.object-store',),
 
 Only users with Admin role seem to have access to this panel.  Can this be 
 changed, and if so, where do I look to make the changes?
 
 This permission comes from your keystone service catalog. If you have
 an object-store entry in your catalog, then all users should see
 this.


I figured it out.  The swift proxy-config had the following entry:

[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = admin, swiftoperator

But I did not have any swift operator role defined. I must have 
cut-and-pasted that entry from an online guide somewhere.  I changed 
swiftoperator to Member and now the non-admin users can access the 
container information.

thanks,
-Wyllys




___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


[Openstack] swift containers panel permissions?

2013-03-12 Thread Wyllys Ingersoll
Can someone point me to docs describing how to add/modify/delete permissions 
for a horizon panel?

I want a non-admin user to be able to access the Swift object-store containers 
panel in horizon.  Currently, the containers panel.py has the permissions set 
to:
permissions = ('openstack.services.object-store',),

Only users with Admin role seem to have access to this panel.  Can this be 
changed, and if so, where do I look to make the changes?

Also, in general, its pretty ugly for the WSGI server to barf up an Internal 
Server Error for a simple permissions issue.  Has anyone considered making 
Nova/Horizon fail a little more gracefully in the face of errors rather than 
the current HTTP 500 status messages?


thanks,
  Wyllys Ingersoll
  eVault



___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp


Re: [Openstack] swift containers panel permissions?

2013-03-12 Thread Kieran Spear
Hi Wyllys,

On 13 March 2013 04:19, Wyllys Ingersoll wyllys.ingers...@evault.com wrote:
 Can someone point me to docs describing how to add/modify/delete permissions 
 for a horizon panel?

 I want a non-admin user to be able to access the Swift object-store 
 containers panel in horizon.  Currently, the containers panel.py has the 
 permissions set to:
 permissions = ('openstack.services.object-store',),

 Only users with Admin role seem to have access to this panel.  Can this be 
 changed, and if so, where do I look to make the changes?

This permission comes from your keystone service catalog. If you have
an object-store entry in your catalog, then all users should see
this.


 Also, in general, its pretty ugly for the WSGI server to barf up an Internal 
 Server Error for a simple permissions issue.  Has anyone considered making 
 Nova/Horizon fail a little more gracefully in the face of errors rather than 
 the current HTTP 500 status messages?

It generally does. I suspect there's something else going on in your
case, possibly a configuration issue with keystone or swift itself.

Paste the error here and we might be able to work out what's going on:

http://paste.openstack.org/

Cheers,
Kieran



 thanks,
   Wyllys Ingersoll
   eVault



 ___
 Mailing list: https://launchpad.net/~openstack
 Post to : openstack@lists.launchpad.net
 Unsubscribe : https://launchpad.net/~openstack
 More help   : https://help.launchpad.net/ListHelp

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp