cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Marcus Sorensen (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (CLOUDSTACK-5145) ListNetworkACL API should list ACLs owned by the user only
Date Mon, 02 Dec 2013 18:22:35 GMT

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-5145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Marcus Sorensen updated CLOUDSTACK-5145:
----------------------------------------

         Priority: Blocker  (was: Major)
    Fix Version/s: 4.3.0

Upgrading to blocker per security issue. Anyone can see firewall rules for anyone else.

> ListNetworkACL API should list ACLs owned by the user only
> ----------------------------------------------------------
>
>                 Key: CLOUDSTACK-5145
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5145
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>            Reporter: Kishan Kavala
>            Assignee: Kishan Kavala
>            Priority: Blocker
>             Fix For: 4.2.1, 4.3.0
>
>
> ListNetworkACL API should filer ACLs by user and list ACLs which can be accessed by the
user only



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message