cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rohit Yadav (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-7129) Non-admin user can use deleteNetwork with shared networks
Date Fri, 08 Aug 2014 09:55:12 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-7129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14090560#comment-14090560
] 

Rohit Yadav commented on CLOUDSTACK-7129:
-----------------------------------------

[~dahn] another one for 4.4, do we want this? cherry-pick if yes - 2f293f42d567b1218cb083250707eeffc5324dc3

> Non-admin user can use deleteNetwork with shared networks
> ---------------------------------------------------------
>
>                 Key: CLOUDSTACK-7129
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7129
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Network Controller
>    Affects Versions: 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0
>            Reporter: Murali Reddy
>            Assignee: Murali Reddy
>            Priority: Critical
>             Fix For: 4.4.0
>
>
> It should not be possible to for a non-admin user to delete a shared network, just like
a non-admin user can not create a shared network. A regular user can currently call deleteNetwork
on a shared network if it is account-specific and owned by the account of the user. This call
will succeed if there are no VMs or virtual routers in the network.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message