Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: pass (athena.apache.org: domain of alex.hitchins@shapeblue.com
 designates 213.199.154.11 as permitted sender)
From: Alex Hitchins <alex.hitchins@shapeblue.com>
To: "dev@cloudstack.apache.org" <dev@cloudstack.apache.org>
Subject: RE: [DISCUSS] api level access controll
Thread-Topic: [DISCUSS] api level access controll
Thread-Index: AQHPHnPWRrrmKQvGKkabUg4vMxdWhJqerfgAgAAI2tA=
Date: Fri, 31 Jan 2014 11:47:11 +0000
Message-ID: 
 <dbc6025f30bf47f4a85a4062fb774625@DB3PR07MB028.eurprd07.prod.outlook.com>
References: 
 <CAGQtxvYZnCc7cSM4NL72Gt2HfeKnUbwTJsvcKoivZb62Uf_A7g@mail.gmail.com>
 <CAP997UdQgFC-46Th6ra22so_=qZiAN33ODv8wHXBJeVE99YCAA@mail.gmail.com>
In-Reply-To: 
 <CAP997UdQgFC-46Th6ra22so_=qZiAN33ODv8wHXBJeVE99YCAA@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Agreed - I believe the IAM proposal that went out recently may have covered=
 this topic a little too.

Is it something to bake into the API layer or better/cleaner to build some =
proxy layer that handles permissions?


Alex Hitchins
+44 7788 423 969

-----Original Message-----
From: Erik Weber [mailto:terbolous@gmail.com]
Sent: 31 January 2014 11:13
To: dev@cloudstack.apache.org
Subject: Re: [DISCUSS] api level access controll

On Fri, Jan 31, 2014 at 12:00 PM, Daan Hoogland <daan.hoogland@gmail.com>wr=
ote:

> H,
>
> I git a question of an operator ad Schuberg Philis to crete a set of
> api keys and to have control over excatly what api calls are allowed
> for this set of keys. Does anybody else recognise this use case?
> already hacked it in? have an idea how to do it? has a reason why not
> to do it?
>
>

Having more flexibility with access control is something that I and the com=
pany I work for appreciate.
I can also see several use cases for this, monitoring user that should only=
 be able to list stuff (but all stuff) et cetera.

--
Erik Weber
Need Enterprise Grade Support for Apache CloudStack?
Our CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infra=
structure-support/> offers the best 24/7 SLA for CloudStack Environments.

Apache CloudStack Bootcamp training courses

**NEW!** CloudStack 4.2.1 training<http://shapeblue.com/cloudstack-training=
/>
18th-19th February 2014, Brazil. Classroom<http://shapeblue.com/cloudstack-=
training/>
17th-23rd March 2014, Region A. Instructor led, On-line<http://shapeblue.co=
m/cloudstack-training/>
24th-28th March 2014, Region B. Instructor led, On-line<http://shapeblue.co=
m/cloudstack-training/>
16th-20th June 2014, Region A. Instructor led, On-line<http://shapeblue.com=
/cloudstack-training/>
23rd-27th June 2014, Region B. Instructor led, On-line<http://shapeblue.com=
/cloudstack-training/>

This email and any attachments to it may be confidential and are intended s=
olely for the use of the individual to whom it is addressed. Any views or o=
pinions expressed are solely those of the author and do not necessarily rep=
resent those of Shape Blue Ltd or related companies. If you are not the int=
ended recipient of this email, you must neither take any action based upon =
its contents, nor copy or show it to anyone. Please contact the sender if y=
ou believe you have received this email in error. Shape Blue Ltd is a compa=
ny incorporated in England & Wales. ShapeBlue Services India LLP is a compa=
ny incorporated in India and is operated under license from Shape Blue Ltd.=
 Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and=
 is operated under license from Shape Blue Ltd. ShapeBlue is a registered t=
rademark.