Hi, That's not the normal behaviour, you may have changed some configuration during your tests. ACL rules in OpenNebula only add permissions, there is no option to make other resources invisible, because by default they are.
Users can only list the resources they have USE permissions over. If your users can list VMs from other group, it is because you have an ACL that allows it, or because you changed the VM permissions to allow USE to 'others', see [1]. If you need more specific help, please include the output of oneacl list. Regards, Carlos [1] http://opennebula.org/documentation:rel3.6:chmod -- Carlos Martín, MSc Project Engineer OpenNebula - The Open-source Solution for Data Center Virtualization www.OpenNebula.org | [email protected] | @OpenNebula<http://twitter.com/opennebula><[email protected]> On Wed, Sep 5, 2012 at 3:37 PM, Пярн Артур <[email protected]> wrote: > Hi > > I'm testing opennebula in multi-tenant envirements and found an upsetting > issue. > When i put users in groups (for example company A and company B groups), i > can't find anything in options and in documentation (ACLs, etc.) to make > company A VMs invisible to company B VMs and opposite. > They just can't do anything with not their own machines, but the still see > all the pool of virtual machines. This is not good in such case. > I will be pleased to hear any advice. > > Thank you in advance. > > -- > Regards, > Artur Pyarn > > _______________________________________________ > Users mailing list > [email protected] > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org > >
_______________________________________________ Users mailing list [email protected] http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
