[ https://issues.apache.org/jira/browse/CLOUDSTACK-1573?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
venkata swamybabu budumuru updated CLOUDSTACK-1573: --------------------------------------------------- Attachment: api.log attached the api log. > listNics API when fired as a non-ROOT admin user shouldn't list vlan info > ------------------------------------------------------------------------- > > Key: CLOUDSTACK-1573 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1573 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Network Controller > Affects Versions: 4.2.0 > Environment: Latest master : commit id # > a4521551a35cadd19a95752d3d93af8c2a9edd5b > - Advanced Zone > - Xen Cluster with 1 hypervisor > Reporter: venkata swamybabu budumuru > Assignee: Jayapal Reddy > Fix For: 4.2.0 > > Attachments: api.log > > > Steps to reproduce : > 1. Have a non-ROOT domain user > 2. create at least 1 isolate n/w > 3. deploy a VM using the above isolated n/ws > 4. verify listNics API as the user mentioned in step :1 > http://localhost:8080/client/api?command=listNics&virtualmachineid=9cf1139f-731e-4679-892f-4375058806fc&response=xml&sessionkey=Hix07fkTU1FTmQw07J56zBl2KY0%3D&listAll=true&page=1&pagesize=20&_=1362647277083 > Observatons : > - It shows the vlan info. There is no need to allow end-user to see L2 info. > <listnics > cloud-stack-version="4.2.0-SNAPSHOT"><count>2</count><nic><id>3d23de95-1e0b-4920-8fa6-82a29417ee9d</id><netmask>255.255.255.0</netmask><gateway>10.1.1.1</gateway><ipaddress>10.1.1.165</ipaddress><isolationuri>vlan://906</isolationuri><broadcasturi>vlan://906</broadcasturi><isdefault>true</isdefault><macaddress>02:00:7c:10:00:02</macaddress><secondaryip><ipaddress>10.1.1.115</ipaddress></secondaryip></nic><nic><id>a5ca7b64-98c6-4cc4-9ca7-38136fdc1937</id><netmask>255.255.255.0</netmask><gateway>10.1.1.1</gateway><ipaddress>10.1.1.221</ipaddress><isolationuri>vlan://908</isolationuri><broadcasturi>vlan://908</broadcasturi><isdefault>false</isdefault><macaddress>02:00:72:d7:00:02</macaddress></nic></listnics> -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira