cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-7129) Non-admin user can use deleteNetwork with shared networks
Date Fri, 08 Aug 2014 10:21:12 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-7129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14090588#comment-14090588
] 

ASF subversion and git services commented on CLOUDSTACK-7129:
-------------------------------------------------------------

Commit de85c4d555e7d8de2e6dd7fd888003f6bf289e71 in cloudstack's branch refs/heads/4.4 from
[~murali.reddy]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=de85c4d ]

CLOUDSTACK-7129: Non-admin user can use deleteNetwork with shared
networks

fix ensures only admin users can delete shared network

(cherry picked from commit 2f293f42d567b1218cb083250707eeffc5324dc3)


> Non-admin user can use deleteNetwork with shared networks
> ---------------------------------------------------------
>
>                 Key: CLOUDSTACK-7129
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7129
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Network Controller
>    Affects Versions: 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0
>            Reporter: Murali Reddy
>            Assignee: Murali Reddy
>            Priority: Critical
>             Fix For: 4.4.0
>
>
> It should not be possible to for a non-admin user to delete a shared network, just like
a non-admin user can not create a shared network. A regular user can currently call deleteNetwork
on a shared network if it is account-specific and owned by the account of the user. This call
will succeed if there are no VMs or virtual routers in the network.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message