Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Date: Wed, 12 Aug 2015 06:22:46 +0000 (UTC)
From: "Rajani Karuturi (JIRA)" <jira@apache.org>
To: cloudstack-issues@incubator.apache.org
Message-ID: <JIRA.12722934.1403316182000.42408.1439360566776@Atlassian.JIRA>
In-Reply-To: <JIRA.12722934.1403316182000@Atlassian.JIRA>
References: <JIRA.12722934.1403316182000@Atlassian.JIRA>
 <JIRA.12722934.1403316182263@arcas>
Subject: [jira] [Updated] (CLOUDSTACK-6974) IAM-Root Admin - When
 listNetwork is used with listall=false (or no listall passed), all isoalted
 networks belonging to other users is listed.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


     [ https://issues.apache.org/jira/browse/CLOUDSTACK-6974?page=3Dcom.atl=
assian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rajani Karuturi updated CLOUDSTACK-6974:
----------------------------------------
    Fix Version/s:     (was: 4.6.0)

> IAM-Root Admin - When listNetwork is used with listall=3Dfalse (or no lis=
tall passed), all isoalted networks belonging to other users is listed.
> -------------------------------------------------------------------------=
---------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-6974
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-697=
4
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the defa=
ult.)=20
>    Affects Versions: 4.4.0
>         Environment: Build from 4.4-forward
>            Reporter: Sangeetha Hariharan
>
> Root Admin - When listNetwork is used with listall=3Dfalse (or no listall=
 passed) and isrecursive=3Dtrue , all networks in the system are returned.
> Steps to reproduce the problem:
> Create multiple domains with few user and domain accounts in them.
> Create isolated networks as each of these accounts.
> Create an admin user under ROOT.
> As this admin user, deploy a VM.
> Use listNetwork with listall=3Dfalse (or no listall passed) and isrecursi=
ve=3Dtrue to retrieve all the networks owned by this admin.
> This results in all the networks in the system being returned.
> Following is the API call that was made , that resulted in 15 networks be=
ing fetched when it should have fetched only 1 isolated network and 1
> shared network.
> http://10.223.49.6:8080/client/api?apiKey=3DPB2CyeaqN0vfTodPzXV52OdE9YZLC=
8K-BrdLiEijWmq85nuAEfXVoAPxbzW0J5BgFAT-f5lnwDEgeOfp_boJAg&isrecursive=3Dtru=
e&response=3Djson&listall=3Dfalse&command=3DlistNetworks&signature=3Dl%2FNR=
4aBSnk7aAEDHhlsAvEXe7Cg%3D Response: { "listnetworksresponse" : { "count":1=
5 ,"network" : [ {"id":"fb3b563c-5ba2-4f9a-aa65-82996f78f20e","name":"Share=
dNetwork-Account","displaytext":"SharedNetwork-Account","broadcastdomaintyp=
e":"Vlan","traffictype":"Guest","gateway":"10.223.1.1","netmask":"255.255.2=
55.0","cidr":"10.223.1.0/24","zoneid":"b690dddf-5755-49ab-8a4d-0aff04fa39f7=
","zonename":"BLR1","networkofferingid":"1bec2c7f-d35d-4d33-a655-d3159be4a6=
ff","networkofferingname":"DefaultSharedNetworkOfferingWithSGService","netw=
orkofferingdisplaytext":"Offering for Shared Security group enabled network=
s","networkofferingconservemode":true,"networkofferingavailability":"Option=
al","issystem":false,"state":"Setup","related":"fb3b563c-5ba2-4f9a-aa65-829=
96f78f20e","broadcasturi":"vlan://153","dns1":"4.2.2.2","type":"Shared","vl=
an":"153","acltype":"Account","account":"testD111A-TestNetworkList-RPNQIQ",=
"domainid":"b706ea33-fbf7-4167-a857-16f79f332cf3","domain":"D111-A243U3","s=
ervice":[
> {"name":"UserData"}
> ,{"name":"Dhcp","capability":[
> {"name":"DhcpAccrossMultipleSubnets","value":"true","canchooseservicecapa=
bility":false}
> ]},{" ...


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)