VM owner with USE rights can resize disk

[kvakanet]

Description
Owner VM with USE rights can resize disk.

To Reproduce

1. Маке VM with disk size 5 Gb
2. Set Rights VM

PERMISSIONS                                                                     
OWNER               : u--                 
GROUP               : ---                 
OTHER               : ---                 

3. Login into sunstore cloud view by owner vm

Expected behavior
Not available to change the size of the disk, as well as not available to change other resources

Details

• Affected Component: one, Sunstone
• Hypervisor: KVM
• Version: 6.4.0 CE

Additional context
It may be possible to extend the usage rights USE to reboot the VM since the VNC is available in the cloud view
send Ctrl-Alt-Del.

Progress Status

• Code committed
• Testing - QA
• Documentation (Release notes - resolved issues, compatibility, known issues)

[paczerny]

Internal note: It seems the RequestManagerDiskResize::request_execute is missing call vm_authorization
Maybe also disk-attach doesn't respect the permissions, we should check also other VM actions

[paczerny]

Fixed authorization for onevm disk-resize. Authorization for other VM commands are ok. Only onevm create-chart returns wrong error code, fixed.

PRs

• src
• tests
• doc