Mailing-List: contact cloudstack-users-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-users@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of Nitin.Mehta@citrix.com
 designates 203.166.19.134 as permitted sender)
From: Nitin Mehta <Nitin.Mehta@citrix.com>
To: "cloudstack-users@incubator.apache.org"
	<cloudstack-users@incubator.apache.org>
Subject: Re: restricting users to a or Zone / Cluster
Thread-Topic: restricting users to a or Zone / Cluster
Thread-Index: AQHOIPIf4XTvWxh8qUuYU+qNu3jo+JilKU2AgAE4zwCAA3+KgA==
Date: Sun, 17 Mar 2013 15:47:30 +0000
Message-ID: <CD6BE28D.1412A%nitin.mehta@citrix.com>
In-Reply-To: 
 <CALuK5bHa4ia6UffWUJo0_CiJJQc8gObzO1LoSKs9ArNHZgmOGg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.2.0.120402
Content-Type: text/plain; charset="us-ascii"
Content-ID: <A5947596DE245D47BED186B40EDB7D0C@citrix.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Something close to this is already being worked on. These talk about
dedicating resources to accounts/domain. See if you can find a flag to
"restrict" them as well.
Or you can create an enhancement for the same

https://cwiki.apache.org/confluence/display/CLOUDSTACK/FS+for+VMs+on+hardwa
re+dedicated+to+a+specific+account

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dedicated+Resources+
-+Public+IP+Addresses+and+VLANs+per+Tenant


Dedicating templates should be possible by using launchPermissions api for
templates.

Thanks,
-Nitin

On 15/03/13 9:22 PM, "Kirk Jantzer" <kirk.jantzer@gmail.com> wrote:

>Bryan, I like this idea - being able to restrict accounts/users/projects
>to
>certain zones/hypervisors/templates/etc. There's already a lot of
>granularity in CS, why not a little more? :-)
>
>
>On Thu, Mar 14, 2013 at 5:12 PM, Pranav Saxena
><pranav.saxena@citrix.com>wrote:
>
>> Well , you can always set up a private zone by unchecking the public
>> checkbox in the zone wizard .
>>
>> -----Original Message-----
>> From: Bryan Whitehead [mailto:driver@megahappy.net]
>> Sent: Friday, March 15, 2013 1:55 AM
>> To: cloudstack-users@incubator.apache.org
>> Subject: restricting users to a or Zone / Cluster
>>
>> I'd like to restrict users to a specific cluster in a zone but I don't
>>see
>> that as possible. Am I correct in this statement?
>>
>> Is there a way to restrict users to a specific Zone?
>>
>> Assuming I trust my users and just give them a specific zone to use -
>>when
>> I setup the zone can I just use the same secondary storage as others
>>zones
>> are do I need a new set of secondary storages as well?
>>
>> -Bryan
>>
>
>
>
>--=20
>Regards,
>
>Kirk Jantzer
>c: (678) 561-5475