im
im copied to clipboard
Admin cannot handle other users deployments
In our IM installation in INFN-CLOUD, being authenticated as "admin" in all connected groups, we tried to perform some operations (view log, delete) on other users' VMs but IM returns a 403 code for access not allowed.
Here a cut from the orchestrator log
2025-02-06 14:03:43.813 ERROR req-0fa3a251-2d63-4680-99c9-b1b8f7ea97fe 11efe491-c486-e438-9d14-005056c00001 26148 --- [ XNIO-2 task-48] .s.d.p.AbstractDeploymentProviderService : Error while retrieving infrastructure log for deployment 11efe491-c486-e438-9d14-005056c00001
it.reply.orchestrator.exception.service.DeploymentException: Error executing request to IM
Error 403: Error Getting Inf. prop: Access to this infrastructure not granted.; nested exception is es.upv.i3m.grycap.im.exceptions.ImClientErrorException
at it.reply.orchestrator.service.deployment.providers.ImServiceImpl.handleImClientException(ImServiceImpl.java:1129)
at it.reply.orchestrator.service.deployment.providers.ImServiceImpl.getDeploymentLogInternal(ImServiceImpl.java:657)
at it.reply.orchestrator.service.deployment.providers.AbstractDeploymentProviderService.getDeploymentLog(AbstractDeploymentProviderService.java:111)
at it.reply.orchestrator.service.DeploymentServiceImpl.getDeploymentLog(DeploymentServiceImpl.java:547)
at it.reply.orchestrator.service.DeploymentServiceImpl$$FastClassBySpringCGLIB$$66a695a.invoke(
Caused by: es.upv.i3m.grycap.im.exceptions.ImClientErrorException: null at es.upv.i3m.grycap.im.rest.client.ImClient.get(ImClient.java:153) at es.upv.i3m.grycap.im.InfrastructureManager.getInfrastructureContMsg(InfrastructureManager.java:227) at it.reply.orchestrator.service.deployment.providers.ImServiceImpl.lambda$11(ImServiceImpl.java:652) at it.reply.orchestrator.service.deployment.providers.ImServiceImpl.lambda$0(ImServiceImpl.java:167) at it.reply.orchestrator.service.security.OAuth2TokenService.executeWithClientForResult(OAuth2TokenService.java:250) at it.reply.orchestrator.service.deployment.providers.ImServiceImpl.executeWithClientForResult(ImServiceImpl.java:166) at it.reply.orchestrator.service.deployment.providers.ImServiceImpl.getDeploymentLogInternal(ImServiceImpl.java:651) ... 124 common frames omitted