Return-Path: X-Original-To: apmail-cloudstack-dev-archive@www.apache.org Delivered-To: apmail-cloudstack-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id D99A310142 for ; Tue, 8 Oct 2013 22:24:23 +0000 (UTC) Received: (qmail 41108 invoked by uid 500); 8 Oct 2013 22:24:23 -0000 Delivered-To: apmail-cloudstack-dev-archive@cloudstack.apache.org Received: (qmail 41073 invoked by uid 500); 8 Oct 2013 22:24:23 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 41065 invoked by uid 99); 8 Oct 2013 22:24:23 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 08 Oct 2013 22:24:23 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of darren.s.shepherd@gmail.com designates 74.125.82.42 as permitted sender) Received: from [74.125.82.42] (HELO mail-wg0-f42.google.com) (74.125.82.42) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 08 Oct 2013 22:24:18 +0000 Received: by mail-wg0-f42.google.com with SMTP id m15so7056068wgh.5 for ; Tue, 08 Oct 2013 15:23:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=+XsZDaupiBBGITwrC91+5icf8VaJHFJeREQT1GOEYrU=; b=EcXp+JpLA6d9sKJqhb7RM70jSzjhZr8loiCVh/3nZvjM4uiWyRnt+vzTVkEh0I6zUn urylh/oL4c0Y7Ev1FeliwuTw6f+jWkuJ/4cdibSMaOx9mYHblNBjzsyEtnWpwD7tjuDJ yB/ZTPUQzsGty9E1vOBoHYtqXcoPLitDPJFLC8ttQIe8lNoSEUtIZHqQY2ItExoodOs3 WnB2bEH2MgaP9g+kHWdUiCmyhl1ueecnbDK6+mO7v8WnfMlFHGpP7iKfQOhy+AZ1+2FC uZbpkgZHWEraX4kq81hHi//fPXhMX7gHlM8ozbb36kx6uCXkIAizJTiSifwTDG1m2Yr5 gpKQ== MIME-Version: 1.0 X-Received: by 10.194.173.163 with SMTP id bl3mr4003889wjc.10.1381271037150; Tue, 08 Oct 2013 15:23:57 -0700 (PDT) Received: by 10.216.152.9 with HTTP; Tue, 8 Oct 2013 15:23:57 -0700 (PDT) Date: Tue, 8 Oct 2013 15:23:57 -0700 Message-ID: Subject: [DISCUSS] make commands.properties the exception, not the rule From: Darren Shepherd To: "dev@cloudstack.apache.org" Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org I would like to largely remove commands.properties. I think most API commands naturally have a default ACL that should be applied. I think it makes sense to add to the @APICommand flags for user, domain, admin. Then, as an override mechanism, people can edit commands.properties to change the default ACL. This would make it such that people could add new commands without the need to edit commands.properties. Thoughts? How will this play with whatever is being done with rbac? Darren