Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Date: Fri, 27 Dec 2013 11:17:51 +0000 (UTC)
From: "manasaveloori (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.12656246.1372942290664.14957.1388143071870@arcas>
In-Reply-To: <JIRA.12656246.1372942290664@arcas>
References: <JIRA.12656246.1372942290664@arcas>
Subject: [jira] [Closed] (CLOUDSTACK-3364) normal users are not allowed to
 edit their own iso
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/CLOUDSTACK-3364?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

manasaveloori closed CLOUDSTACK-3364.
-------------------------------------


Verified that isExtratable and isFeatured fields are not editable and not passed for updateIsoPermission API.So account use is able to edit his own ISO.
Hence closing it.

> normal users are not allowed to edit their own iso
> --------------------------------------------------
>
>                 Key: CLOUDSTACK-3364
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3364
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: API
>    Affects Versions: 4.2.0
>            Reporter: shweta agarwal
>            Assignee: Nitin Mehta
>            Priority: Critical
>             Fix For: 4.3.0
>
>
> Repro steps:
> 1.Create a domain
> 2.create a account under that domain
> 3.create a ISO as a account under the non root domain
> 4.Edit the ISO
> BUg :
> gets message: 
> Only ROOT admins are allowed to modify this attribute.
> API:
> http://10.147.38.141:8080/client/api?command=updateIsoPermissions&response=json&sessionkey=8rczMjm4sfljFOEi6dL2xT631sc%3D&id=2b8c87a0-4325-418d-80af-ce6f691edcd7&zoneid=bfdf7ac5-16c3-491e-aabd-f7ad696612b8&ispublic=false&isfeatured=false&isextractable=false&_=1372941865923
> response:
> { "updateisopermissionsresponse" : {"uuidList":[],"errorcode":431,"cserrorcode":4350,"errortext":"Only ROOT admins are allowed to modify this attribute."} }
> This may be because in case of edit ISO we show  extractable and featured field as editable to normal user , which normal user is not allowed to do  and api passes these as parameters
> In case of template these fields are shown as non editable hence API passed does not contain isfeatured and isextractable fields


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)