<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div><div dir="ltr"><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);">Hello,</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);">I am struggling on this problem for 2 weeks. I am using updated Openstack Havana on Ubuntu 12.04 LTS. Dashboard and controller services are installed different servers. Controller server has keystone, nova etc services. Dashboard is installed standalone. I created a role "manager" on keystone, I added this role on policy.json file and give permission to manage groups (after some tests, I gave almost all identity permissions). In dashboard server, I wanted to create a group link on Project Dashboard. In order to see this link, I copied /usr/share/openstack-dashboard/openstack_dashboard/dashboards/admin/groups folder to /usr/share/openstack-dashboard/openstack_dashboard/dashboards/project/groups. I changed all links which defined for admin dashboard to project dashboard in groups folder files. I defined a new panel on Project Dashboard.py file. Now I can see Groups link on Project dashboard just below.In addition, I defined permission = ("openstack.role.manager") in newly created groups panel because I want to enable this link just for manager role.</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><div style="display:inline-block;" id="ecxinlineImage1"><span> </span><div style="display:inline-block;" class="ecxinlineImage"><img src="cid:inlineImage1" height="388" width="225"></div><span> </span></div><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);">My problem is that If user has an admin rights this groups link works ok. If I give a user to manager rights, Groups link can be seen in the first login, but when I click to the Groups link I have this error:</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><div style="display:inline-block;" id="ecxinlineImage0"><span> </span><div style="display:inline-block;" class="ecxinlineImage"><img src="cid:inlineImage0" height="298" width="399"></div><span> </span></div><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);">I tried to change keystone_policy.json on dashboard (same with keystone's policy.json). I tried to debug all logs but I cannot see any error on permission side. There is no error on Keystone server debug. I checked apache logs for dashboard error, but nothing wrong. Somehow dashboard do not allow manager role user to get in newly created groups page.</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);">I have this logs on my apache2/error.log:</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);"><br></p><pre style="font-family:Menlo, Monaco, 'Courier New', monospace;font-size:12.025px;background-color:rgb(245, 245, 245);padding:8.5px;color:rgb(51, 51, 51);border-top-left-radius:4px;border-top-right-radius:4px;border-bottom-right-radius:4px;border-bottom-left-radius:4px;line-height:18px;border:1px solid rgba(0, 0, 0, 0.14902);white-space:pre-wrap;word-break:break-all;word-wrap:break-word;clear:both;"><code style="font-family:Menlo, Monaco, 'Courier New', monospace;padding:0px;color:inherit;border-top-left-radius:3px;border-top-right-radius:3px;border-bottom-right-radius:3px;border-bottom-left-radius:3px;background-color:transparent;border:0px;clear:both;"> [Fri Feb 14 08:39:36 2014] [error] REQ: curl -i -X POST http://controller:5000/v3/auth/tokens -H "Content-Type: application/json" -H "User-Agent: python-keystoneclient"
[Fri Feb 14 08:39:36 2014] [error] REQ BODY: {"auth": {"identity": {"methods": ["password"], "password": {"user": {"domain": {"name": "Default"}, "name": "manageruser", "password": "xxxxx"}}}}}
[Fri Feb 14 08:39:36 2014] [error]
[Fri Feb 14 08:39:36 2014] [error] INFO:urllib3.connectionpool:Starting new HTTP connection (1): controller
[Fri Feb 14 08:39:36 2014] [error] DEBUG:urllib3.connectionpool:"POST /v3/auth/tokens HTTP/1.1" 201 6525
[Fri Feb 14 08:39:36 2014] [error] RESP: [201] CaseInsensitiveDict({'x-subject-token': xxxxxxxxx
[Fri Feb 14 08:39:36 2014] [error] RESP BODY: {"token": {"methods": ["password"], "roles": [{"id": "01c89d36a1a9494fa6ed727811495622", "name": "manager"}], "expires_at": "2014-02-15T08:39:23.790554Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "bbdb7287964f4a26bc749d9ddecb4f55", "name": "testproject"}, "catalog": [{"endpoints": [{"url": "http://controller:5000/v2.0", "region": "regionOne", "legacy_endpoint_id": "fd13966eaa294b1595a18661c78c3de8", "interface": "public", "id": "26b339849c2a4e79b605a2f2d42c2d33"}, {"url": "http://controller:35357/v2.0", "region": "regionOne", "legacy_endpoint_id": "fd13966eaa294b1595a18661c78c3de8", "interface": "admin", "id": "7c530920742946a99cf2a71ad9503e7a"}, {"url": "http://controller:5000/v2.0", "region": "regionOne", "legacy_endpoint_id": "fd13966eaa294b1595a18661c78c3de8", "interface": "internal", "id": "c97bf6ff3d144bedb37825868e767596"}], "type": "identity", "id": "1778da57d7834612ae44f13d9c91ae55"}, {"endpoints": [{"url": "http://controller:8776/v2/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "de5975f4de414b718ede8a48ad4094d1", "interface": "admin", "id": "545990b1dc624d0e9e90ee95eb102518"}, {"url": "http://controller:8776/v2/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "de5975f4de414b718ede8a48ad4094d1", "interface": "public", "id": "b64a6400851b4ec1bd9c598336fad2a2"}, {"url": "http://controller:8776/v2/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "de5975f4de414b718ede8a48ad4094d1", "interface": "internal", "id": "bf76b2dd28f8433389e56a4a70f37eb5"}], "type": "volumev2", "id": "2f9304f3d7f74d9984de80d7df6eaf4f"}, {"endpoints": [{"url": "http://image:9292", "region": "regionOne", "legacy_endpoint_id": "2817ba1a01b649a2b95dd00b8e990949", "interface": "admin", "id": "135dc0d154fe4712891f3b5959a58403"}, {"url": "http://image:9292", "region": "regionOne", "legacy_endpoint_id": "2817ba1a01b649a2b95dd00b8e990949", "interface": "public", "id": "31893069bd19494fb4fe4251364fbfa4"}, {"url": "http://image:9292", "region": "regionOne", "legacy_endpoint_id": "2817ba1a01b649a2b95dd00b8e990949", "interface": "internal", "id": "827ae89a03e14cceacf171efb2a1cea8"}], "type": "image", "id": "3c6fccb117394f919753cda16eeaa621"}, {"endpoints": [{"url": "http://controller:8000/v1", "region": "regionOne", "legacy_endpoint_id": "3c8f12e440ae4e078d897b5763822f0b", "interface": "admin", "id": "3fbcb01ef860421d9a9fd62f9384c185"}, {"url": "http://controller:8000/v1", "region": "regionOne", "legacy_endpoint_id": "3c8f12e440ae4e078d897b5763822f0b", "interface": "public", "id": "a643ee79ba1e4489b261c34ce0a8d476"}, {"url": "http://controller:8000/v1", "region": "regionOne", "legacy_endpoint_id": "3c8f12e440ae4e078d897b5763822f0b", "interface": "internal", "id": "b54751197feb47fba6abb7489c3d1f68"}], "type": "cloudformation", "id": "623ebc01bd4048a29d5434ebf4cb124d"}, {"endpoints": [{"url": "http://controller:9696", "region": "regionOne", "legacy_endpoint_id": "65d945aa98a84e35a12d90b855322711", "interface": "internal", "id": "4c475d3eb07f4c05a6e5e0e8c1d3a3d3"}, {"url": "http://controller:9696", "region": "regionOne", "legacy_endpoint_id": "65d945aa98a84e35a12d90b855322711", "interface": "admin", "id": "89d031aff0ff4bf7b3fd17822279323b"}, {"url": "http://controller:9696", "region": "regionOne", "legacy_endpoint_id": "65d945aa98a84e35a12d90b855322711", "interface": "public", "id": "e44c481e48a64138983fe5132c4fd70b"}], "type": "network", "id": "7508e6b9109d491faf97fa0393686758"}, {"endpoints": [{"url": "http://controller:8776/v1/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "eae8cbc4b3c44f0b9dbdebae6e951558", "interface": "internal", "id": "1bcc59371f17459891e9e2fe3cd87db8"}, {"url": "http://controller:8776/v1/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "eae8cbc4b3c44f0b9dbdebae6e951558", "interface": "admin", "id": "6f76e9ec497248dfb163ce64095ebf5b"}, {"url": "http://controller:8776/v1/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "eae8cbc4b3c44f0b9dbdebae6e951558", "interface": "public", "id": "f57e05df78a844aeaa55dcd1e190adb1"}], "type": "volume", "id": "7870da6a09ff43d7b24b125e90ec84ba"}, {"endpoints": [{"url": "http://controller:8004/v1/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "94bd0c96843848d49d7e993be40c6c97", "interface": "internal", "id": "782bcddb45714448a046f280e3597c2c"}, {"url": "http://controller:8004/v1/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "94bd0c96843848d49d7e993be40c6c97", "interface": "admin", "id": "78485b4dfa2b49bbae6bf615786e10e3"}, {"url": "http://controller:8004/v1/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "94bd0c96843848d49d7e993be40c6c97", "interface": "public", "id": "c7477ac664914a508042d24100970893"}], "type": "orchestration", "id": "b1d6edc433984c3a9f351d94505d4948"}, {"endpoints": [{"url": "http://controller:8774/v2/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "666a0529c1554d2cb36a94e0d720811a", "interface": "admin", "id": "c189331d83414d9ca89ac73a21b26861"}, {"url": "http://controller:8774/v2/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "666a0529c1554d2cb36a94e0d720811a", "interface": "public", "id": "e7e4384daee44a239cb8e17b8c2c6509"}, {"url": "http://controller:8774/v2/bbdb7287964f4a26bc749d9ddecb4f55", "region": "regionOne", "legacy_endpoint_id": "666a0529c1554d2cb36a94e0d720811a", "interface": "internal", "id": "fce995f8856842bfb544e639cd287ad1"}], "type": "compute", "id": "f717913cf4a6401b8d810838f48988f6"}, {"endpoints": [{"url": "http://telemetry:8777", "region": "regionOne", "legacy_endpoint_id": "666b61efd9a04d1e8cb686dde9b9fabe", "interface": "public", "id": "32bfb0ac540243d09f2a2bf8a331823c"}, {"url": "http://telemetry:8777", "region": "regionOne", "legacy_endpoint_id": "666b61efd9a04d1e8cb686dde9b9fabe", "interface": "internal", "id": "ebe3a89a06b0485bab9e1ee44f6be694"}, {"url": "http://telemetry:8777", "region": "regionOne", "legacy_endpoint_id": "666b61efd9a04d1e8cb686dde9b9fabe", "interface": "admin", "id": "fa2065687959471f897c181ff4099425"}], "type": "metering", "id": "fe7ef38ef58b4db19fba1fed46a0fda4"}], "extras": {}, "user": {"domain": {"id": "default", "name": "Default"}, "id": "6e08b2ea6f4f4f3d84a2cbe2f3e4c446", "name": "manageruser"}, "issued_at": "2014-02-14T08:39:23.790589Z"}}
[Fri Feb 14 08:39:36 2014] [error]
[Fri Feb 14 08:39:36 2014] [error] Login successful for user "manageruser".</code></pre> </div></div><style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style> </div></body>
</html>