cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <>
Subject [jira] [Commented] (CLOUDSTACK-3169) [EIP/ELB] [Projects] associateIpAddress fails when executed by non-ROOT admin account from projects view
Date Wed, 26 Jun 2013 22:36:21 GMT


ASF subversion and git services commented on CLOUDSTACK-3169:

Commit 728145f3b142b85bfe464d2069237cae99e0b25b in branch refs/heads/master-6-17-stable from
[;h=728145f ]

CLOUDSTACK-3169: ipAssoc - set account id of the ip to the project account. Used to be set
to the network owner which is System in Shared network case, and the further verification
used to fail because of that

> [EIP/ELB] [Projects] associateIpAddress fails when executed by non-ROOT admin account
from projects view
> --------------------------------------------------------------------------------------------------------
>                 Key: CLOUDSTACK-3169
>                 URL:
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>    Affects Versions: 4.2.0
>            Reporter: Alena Prokharchyk
>            Assignee: Alena Prokharchyk
>             Fix For: 4.2.0
> Steps to reproduce : 
> 1. Have at least 1 EIP/ELB enabled zone using the latest 3.0.x code. 
> 2. Create a project 
> 3. Have at least one non-ROOT domain admin as owner of the above project. 
> 4. Execute associate IpAddress API to associate an EIP address 
> Observations: 
> (i) It fails with the following error 
> 2013-06-17 23:01:49,369 DEBUG [cloud.api.ApiServer] (catalina-exec-9:null) (userId=3
accountId=3 sessionId=null) -- GET apiKey=m8y-aWlT5lopDACScCb022A_v0dnRM6-fmYOdqFLDdIzJhyoYY_I1TVauT2wL9fWBpQHMnhLCVF2UdMJ9dbBNQ&command=associateIpAddress&networkid=86ed62de-6250-47c6-b9b3-45dbbc1d7ad1&projectid=ac67765c-e9b0-417a-81e4-0dff71ce00c6&response=json&zoneid=c9c8792b-8bc6-4b60-b32e-6ca7dfb43ff3&signature=2sKP4oCfm87ka6DBrVUmeZQryjk%3D
531 Acct[3-dom1Acc1] does not have permission to operate with resource Acct[1-system] 

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:

View raw message