cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rajani Karuturi (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (CLOUDSTACK-7283) Allow regular user to execute listUsers API call
Date Mon, 16 Mar 2015 03:44:23 GMT

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-7283?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Rajani Karuturi updated CLOUDSTACK-7283:
----------------------------------------
    Fix Version/s:     (was: 4.5.0)
                   4.5.1

> Allow regular user to execute listUsers API call
> ------------------------------------------------
>
>                 Key: CLOUDSTACK-7283
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7283
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: API, Doc
>    Affects Versions: 4.5.0
>            Reporter: Alena Prokharchyk
>             Fix For: 4.5.1
>
>
> Since normal-user role can have access to listAccounts API that returns user info + he
can update users info by calling updateUser, he should have an access to listUsers API. The
response should return his user info only. Other users belonging to the same user's account,
shouldn't be returned.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message