Return-Path: X-Original-To: apmail-cloudstack-dev-archive@www.apache.org Delivered-To: apmail-cloudstack-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id CC51619637 for ; Mon, 25 Apr 2016 11:16:35 +0000 (UTC) Received: (qmail 79135 invoked by uid 500); 25 Apr 2016 11:16:35 -0000 Delivered-To: apmail-cloudstack-dev-archive@cloudstack.apache.org Received: (qmail 79078 invoked by uid 500); 25 Apr 2016 11:16:35 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 79058 invoked by uid 99); 25 Apr 2016 11:16:35 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 25 Apr 2016 11:16:35 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id B5203DFE16; Mon, 25 Apr 2016 11:16:34 +0000 (UTC) From: koushik-das To: dev@cloudstack.apache.org Reply-To: dev@cloudstack.apache.org References: In-Reply-To: Subject: [GitHub] cloudstack pull request: CLOUDSTACK-8562: Dynamic Role-Based API C... Content-Type: text/plain Message-Id: <20160425111634.B5203DFE16@git1-us-west.apache.org> Date: Mon, 25 Apr 2016 11:16:34 +0000 (UTC) Github user koushik-das commented on the pull request: https://github.com/apache/cloudstack/pull/1489#issuecomment-214269005 @rhtyd Have you ran the tests using a regular user? As per dynamic checker code, for root admin all checks are bypassed. I think a good comparison will be to run the tests on master with and without dynamic role checker using a regular user so that the DB code path gets exercised. So are you saying static role checker will no longer be used and the migration of data from commands.properties to DB is forced. Rather than completely removing commands.properties, it will be good to keep both - static checker will only use commands.properties and dynamic checker only goes to DB. The choice should be left with users when they want to migrate. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. ---