Restore aborts when setting NethVoice Hotel configuration

[Stell0]

Restoring a NethVoice backup can abort during restore-module/70configure_module when the script calls set-nethvoice-hotel through agent.tasks.run(). The same action works when executed from outside with api-cli, but fails from the module context with 403 Forbidden.

This prevents the following restore steps from running, including SIP/SIPS port adjustment and service reload.

Steps to reproduce

1. Restore a NethVoice backup from version <= 1.7.0.
2. Let the restore reach restore-module/70configure_module.
3. The script calls set-nethvoice-hotel with a valid payload through agent.tasks.run().
4. Check the restore result and logs.

Expected behavior

The set-nethvoice-hotel action is authorized from the module context and the restore completes all post-restore steps.

Actual behavior

The set-nethvoice-hotel action fails with 403 Forbidden, causing restore-module to abort at step 70configure_module.

Traceback (most recent call last):
  File "/home/nethvoice1/.config/actions/restore-module/70configure_module", line 33, in <module>
    response = agent.tasks.run(agent_id=os.environ['AGENT_ID'], action='set-nethvoice-hotel', data={
  File "/usr/local/agent/pypkg/agent/tasks/apiclient.py", line 246, in _apost_task
    async with client.post(
  File "/usr/local/agent/pyenv/lib64/python3.11/site-packages/aiohttp/client_reqrep.py", line 629, in raise_for_status
    raise ClientResponseError(
aiohttp.client_exceptions.ClientResponseError: 403, message='Forbidden', url='http://cluster-leader:9311/api/module/nethvoice1/tasks'

task/module/nethvoice1/xxxxxxxx-xxx-xxxx-xxxx-xxxxxxxxxxx: action "restore-module" status is "aborted" (1) at step 70configure_module

See also

• https://github.com/nethesis/ns8-nethvoice-proxy/blob/main/imageroot/actions/create-module/30grants
• https://mattermost.nethesis.it/nethesis/pl/ygqjnshndbba5mg4u4hzycku3c
• https://mattermost.nethesis.it/nethesis/pl/nt5g5cwyy3ngp8ckdrsdtxe8kr

[Stell0]

Test case

Precondition

Create a NethVoice backup from a version that already contains this fix, because NS8 restores the same application version as the backed-up instance.

Steps

1. Install a NethVoice instance with the fixed version.
2. Configure the instance enough to produce a valid backup.
3. Create a backup using RustFS.
4. Restore the backup on a different cluster or node.
5. Wait for the restore procedure to complete.
6. Check the restore logs.

Expected result

• The restore completes successfully.
• The restore-module/70configure_module step does not fail.
• The set-nethvoice-hotel action can be executed from the module context through agent.tasks.run().
• No 403 Forbidden error is logged for set-nethvoice-hotel.
• The following post-restore steps are executed:
  • 71set_db_services_ports
  • 71update_user_dbconn
  • 72reload_services
• The restored NethVoice instance is usable.

[nrauso]

test case VERIFIED