We have the following
1 group called client with these permissions: Datastore.Allocate, Datastore.AllocateSpace VM.Allocate VM.Audit VM.Backup VM.Console VM.Monitor VM.PowerMgmt
We have 2 drives
Templates NFS Share - users have PVEAuditor access
Node Storage Drive - users have client access (they can't browse the contents but can write to it)
Now I have the user log in and he tries to restore a backup from the templates share to the node storage drive and i get the below
Permission check failed (/storage/Templates, Datastore.Allocate) (403)
why would it need datastore.allocate on the templates share? its not writing to it (the reason I want to prevent this is I dont' want users erasing templates)
This is our way to work around kvm templating
1 group called client with these permissions: Datastore.Allocate, Datastore.AllocateSpace VM.Allocate VM.Audit VM.Backup VM.Console VM.Monitor VM.PowerMgmt
We have 2 drives
Templates NFS Share - users have PVEAuditor access
Node Storage Drive - users have client access (they can't browse the contents but can write to it)
Now I have the user log in and he tries to restore a backup from the templates share to the node storage drive and i get the below
Permission check failed (/storage/Templates, Datastore.Allocate) (403)
why would it need datastore.allocate on the templates share? its not writing to it (the reason I want to prevent this is I dont' want users erasing templates)
This is our way to work around kvm templating
