GabrielBrascher commented on issue #6049: URL: https://github.com/apache/cloudstack/issues/6049#issuecomment-1054456499
Thanks for raising that PR, @weizhouapache. I have not dug deeper into your PR, so I might be missing another context beyond the lines you presented here. Please, correct me if I am missing something regarding your PR. Unfortunately, I don't see how changing from "caller" to "vmOwner" in the `_accountMgr.checkAccess,` does fix this issue. I've tested both ways: 1. Root admin deploying VM for a user account 2. the user account itself deploying a VM (thus, **caller = vmOwner**) Both ways the VM was deployed even with the owner / caller not holding permissions to deploy VMs on the respective network. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
