Addmodel ACL does not allow to grant access to other users

[Uros Jovanovic]

Even though show-model states that users are model admins, they are not able to share the models with other users.

urulama@ubuntu:~/go/src/github.com/juju/juju$ juju logout
Logged out. You are still logged into 10 controllers.
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju add-model test --credential aws
uploading credential 'aws/uros-jovanovic@external/aws' to controller
Added 'test' model on aws/eu-central-1 with credential 'aws' for user 'uros-jovanovic'

urulama@ubuntu:~/go/src/github.com/juju/juju$ juju models
CONTROLLER: everyone2

MODEL OWNER STATUS ACCESS LAST CONNECTION
test* uros-jovanovic@external available admin never connected

urulama@ubuntu:~/go/src/github.com/juju/juju$ juju grant martin-hilton@external write test
ERROR permission denied (unauthorized access)
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju show-model
test:
  name: test
  model-uuid: 5e7bc44c-3119-4243-819e-f548b012715a
  controller-uuid: 236dfb1c-3d76-467c-83eb-690e4b0515a1
  controller-name: everyone2
  owner: uros-jovanovic@external
  cloud: aws
  region: eu-central-1
  type: ec2
  life: alive
  status:
    current: available
    since: 1 minute ago
  users:
    uros-jovanovic@external:
      display-name: uros-jovanovic
      access: admin
      last-connection: never connected

Same for local users

urulama@ubuntu:~/go/src/github.com/juju/juju$ juju grant bob addmodel
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju grant alice addmodel
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju logout
Logged out. You are still logged into 10 controllers.
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju login bob
password:
You are now logged in to "everyone2" as "bob@local".
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju add-model test --credential aws
uploading credential 'aws/bob@local/aws' to controller
Added 'test' model on aws/eu-central-1 with credential 'aws' for user 'bob'
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju grant alice read test
ERROR permission denied
urulama@ubuntu:~/go/src/github.com/juju/juju$ juju show-model test
test:
  name: test
  model-uuid: 2c156109-f316-498b-8ae3-990b0ec1da94
  controller-uuid: 236dfb1c-3d76-467c-83eb-690e4b0515a1
  controller-name: everyone2
  owner: bob@local
  cloud: aws
  region: eu-central-1
  type: ec2
  life: alive
  status:
    current: available
    since: 2 minutes ago
  users:
    bob@local:
      display-name: bob
      access: admin
      last-connection: never connected

[Uros Jovanovic (uros-jovanovic)]

BTW, this is with "juju grant everyone@external addmodel" enabled.

[Horacio Durán (hduran-8)]

This seems to be an issue with modelusersC not being a global collection.

[Horacio Durán (hduran-8)]

I proposed a solution in http://reviews.vapour.ws/r/5542/