Non-admin user cannot list or assign SLA backup offering

[leolns]

problem

With the introduction of AD-HOC backups on Cloudstack 4.21.0.0 and the creation of the userDrivenBackupAllowed flag, non-admin users can no longer list or assign SLA-type backup offerings to VMs.

versions

Cloudstack 4.21.0.0 + Veeam backup plugin

The steps to reproduce the bug

1- Create a new SLA backup offering as admin
2- Try to list it on backup offering or assign it to a vm

What to do about it?

It is necessary to adjust it to list all backup offerings, not only those of the AD-HOC type.

[abh1sar]

@leolns Can you please share more info on how you created the backup offering.
Did you enable userDrivenBackups?
What do you mean by SLA backup offering?

[leolns]

According to the documentation for the current version (https://docs.cloudstack.apache.org/en/4.21.0.0/adminguide/backup_and_recovery.html) , there are two types of backup offerings: SLA and ADHOC.

The SLA offering is created by the administrator to run automatically within a scheduled time range, and the user can assign the offering to an instance.

The ADHOC offering allows the user to create new backups and define their execution schedule.

If I select userDrivenBackups for an SLA-type offering, the offering becomes visible to the user; however, the user is then able to run or schedule it manually, which should not be possible for this type of backup offering.

[abh1sar]

@leolns Thanks for the info.
Yes, according to the docs, the backup offerings that have userDriveBackups=false should still be shown in listBackupOfferings and allowed to be assigned to instance by Admins as well as normal Users. This needs fixing.