Regular domain admin account cannot change nicAdapter “Request Failed (431)”

[kricud]

ISSUE TYPE

• Bug Report

COMPONENT NAME

UI

CLOUDSTACK VERSION

4.15.2

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

Regular domain admin account cannot change nicAdapter “Request Failed (431)” in new UI in OLD it works.

STEPS TO REPRODUCE

Edit nicAdapter settings

EXPECTED RESULTS

Regular domain admin account can change nicAdapter

ACTUAL RESULTS

Regular domain admin account cannot change nicAdapter

[shwstppr]

@kricud are you sure about that this worked in the old UI. The error seen here comes from backend and I checked in 4.15.1.0 as well and the code is same - it doesn't allow non-root admins to update these settings,
https://github.com/apache/cloudstack/blob/4.15.1.0/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java#L2574-L2583

[kricud]

@shwstppr ACS 4.15.2

From top:
First legacy UI
Second new UI

[shwstppr]

@kricud seems to be working okay in my testing for nicAdapter with domain admin on 4.15.2.0

[sureshanaparti]

Hi @kricud Is it fresh installation or upgraded one? Can you check if nicAdapter / rootDiskController detail mentioned in the global settings: 'user.vm.denied.details' and 'user.vm.readonly.details'.

[kricud]

@sureshanaparti In global settings I have only user.vm.readonly.ui.details with value dataDiskController, rootDiskController. Don’t have user.vm.denied.details.

@shwstppr User admin has Role “Root Admin” Role Type “Admin” with these permissions it works.
Its not working if you have Account with Role “Domain Admin” Role Type “Domain Admin” and user created under this account cannot change nicAdapter.

[shwstppr]

@kricud in the video I was first logged in as domain admin only. Please see initial few seconds. Later I logged in as root admin to show ACS version

[kricud]

@shwstppr Step by step how to reproduce it.

1. Install Windows Server from ISO
2. Hypervisor is Vmware
3. Install VMware Tools on VM
4. Reboot
5. By default in VMware nic adapter is E1000
6. Shutdown VM
7. Try change nic adapter to VMxnet3 and get error in new UI.
8. Try change nic adapter to VMxnet3 in old UI and its working.
   
   
   
   
   

[sureshanaparti]

Hi @kricud Can you try with API/cmk update virtualmachine. Also, please share the API calls (from browser developer tools) from old and new UI.