cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF GitHub Bot (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-9679) Allow master user to manage subordinate user uploaded template
Date Tue, 04 Apr 2017 21:12:41 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-9679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15955821#comment-15955821
] 

ASF GitHub Bot commented on CLOUDSTACK-9679:
--------------------------------------------

Github user pdion891 commented on the issue:

    https://github.com/apache/cloudstack/pull/1834
  
    @pdumbre @karuturi @syed 
    I thinks this introduce an issue where a domain admin cannot get a template by id. 
    a domain admin can list feature template and get a template via `ids=` but not with `id=`
    The example bellow is perform with a domain admin account to list public+featured template
at root domain:
    
    ```
    (beta2r1-ninja) > list templates templatefilter=featured filter=name,id
    count = 9
    template:
    +--------------------------------------+---------------------------------+
    |                  id                  |               name              |
    +--------------------------------------+---------------------------------+
    | 513b3a6d-c011-46f0-a4a3-2a954cadb673 |      CoreOS Alpha 1367.5.0      |
    | 0c04d876-1f85-45a7-b6f4-504de435bf12 |    Debian 8.5 PV base (64bit)   |
    | 285f2203-449a-428f-997a-1ffbebbf1382 |           CoreOS Alpha          |
    | 332b6ca8-b3d6-42c7-83e5-60fe87be6576 |          CoreOS Stable          |
    | 3b705008-c186-464d-ad59-312d902420af |   Windows Server 2016 std SPLA  |
    | 4256aebe-a1c1-4b49-9993-de2bc712d521 |       Ubuntu 16.04.01 HVM       |
    | 59e6b00a-b88e-4539-aa3c-75c9c7e9fa6c | Ubuntu 14.04.5 HVM base (64bit) |
    | 3ab936eb-d8c2-44d8-a64b-17ad5adf8a51 |          CentOS 6.8 PV          |
    | 7de5d423-c91e-49cc-86e8-9d6ed6abd997 |          CentOS 7.2 HVM         |
    +--------------------------------------+---------------------------------+
    (beta2r1-ninja) > list templates templatefilter=featured id=7de5d423-c91e-49cc-86e8-9d6ed6abd997
filter=name,id
    Error 531: Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not have permission
to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9
    cserrorcode = 4365
    errorcode = 531
    errortext = Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not have permission
to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9
    uuidList:
    (beta2r1-ninja) > list templates templatefilter=featured ids=7de5d423-c91e-49cc-86e8-9d6ed6abd997
filter=name,id
    count = 1
    template:
    +--------------------------------------+----------------+
    |                  id                  |      name      |
    +--------------------------------------+----------------+
    | 7de5d423-c91e-49cc-86e8-9d6ed6abd997 | CentOS 7.2 HVM |
    +--------------------------------------+----------------+
    ```


> Allow master user to manage subordinate user uploaded template
> --------------------------------------------------------------
>
>                 Key: CLOUDSTACK-9679
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9679
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>            Reporter: pallavi Dumbre
>
> REPRO STEPS
> ==================
> 1. Create Master User Aaron
> 2. Create common user feixiang within tenant Aaron
> 3. Login as feixiang, upload template CentOS56
> 4. Login as Aaron, go to Template view ,unable to see feixiang's template CentOS56
> EXPECTED BEHAVIOR
> ==================
> Login as master user can view all subordinate user's template
>  
> ACTUAL BEHAVIOR
> ==================
> Only master user itself upload template to manageable
>  



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message