{"comment":{"url":"https://api.github.com/repos/spender-sandbox/cuckoo-modified/comments/18243375","html_url":"https://github.com/spender-sandbox/cuckoo-modified/commit/68f58d05ad46b4cac38d564b6ab17f44430f81e5#commitcomment-18243375","id":18243375,"user":{"login":"mallorybobalice","id":5554485,"avatar_url":"https://avatars.githubusercontent.com/u/5554485?v=3","gravatar_id":"","url":"https://api.github.com/users/mallorybobalice","html_url":"https://github.com/mallorybobalice","followers_url":"https://api.github.com/users/mallorybobalice/followers","following_url":"https://api.github.com/users/mallorybobalice/following{/other_user}","gists_url":"https://api.github.com/users/mallorybobalice/gists{/gist_id}","starred_url":"https://api.github.com/users/mallorybobalice/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mallorybobalice/subscriptions","organizations_url":"https://api.github.com/users/mallorybobalice/orgs","repos_url":"https://api.github.com/users/mallorybobalice/repos","events_url":"https://api.github.com/users/mallorybobalice/events{/privacy}","received_events_url":"https://api.github.com/users/mallorybobalice/received_events","type":"User","site_admin":false},"position":null,"line":null,"path":null,"commit_id":"68f58d05ad46b4cac38d564b6ab17f44430f81e5","created_at":"2016-07-14T09:25:44Z","updated_at":"2016-07-14T09:25:44Z","body":"hello there. \r\n\r\numm, sorry to comment directly on the commit, but was wondering if I could ask a question on setting this up \r\nI suppose you guys might be using admin rights on the ESX and data store so you can't necessarily help? \r\n\r\n\r\nkay, so we got:\r\n\thttps://esxhostIpOrName/folder/vm1foldername?dcPath=ha-datacenter&dsName=DATASTOR%20ENAME\r\n\t\twhere the VM sits\r\n\t\troot account can connect, \r\n\t\tlimited rights account can't.  (limited account is however permissioned correctly to be able to normally work with Csb via ESX or VS api aside from memory snapshots. a mix of read only role on ha-datacenter hierarchy on the esx host to a final set of extra role rights on the folder the VMs are in )\r\n\r\nany idea what rights are required for connecting there? \r\n\tlooks a bit like browse datastore? (it also seems like rights on datastores are only manageable via vcenter, so \t\ti'm not sure how i'd add the same local account to it)\r\n\r\n\tDoesn't look like data store rights are permissionable per folder, and at a guess\r\n\r\n\r\nthis is where the snapshots will go \r\n\t\twhat rights are required to download snapshots memory parts?  \r\n\t\t\thttps://esxhostIpOrName/folder/vm1foldername/randomsnapshot.vmsn?dcPath=ha%2ddatacenter&dsName=DATASTOR%20ENAME\r\n\r\n\t\tit looks like it gets the data store path above + snapshot properties and just constructs the https link ala above to \r\n\t\t\tallow vm download under provisisioning? \r\n\ti presume along with access to that it needs two more things:\r\n\t\taccess to create snapshots. - straight out esx host right on a role\r\n\t\taccess to delete snapshots.  - straight out esx host right on a role\r\n\r\n\t\tlikewise,looks like that's not granular per object, but eh. \r\n\r\n\r\n\r\nany ideas?  sorry again this is probably not the right place to ask"}}
{"actor":{"display_login":"mallorybobalice"}}