rohityadavcloud opened a new issue, #6754:
URL: https://github.com/apache/cloudstack/issues/6754
Root admin not allowed to deploy in a VPC belonging to account in a non-ROOT
domain.
Steps to reproduce:
- Create a domain D1 under ROOT domain
- Create an account T1 in D1
- Login as T1 user, create a VPC, a VPC tier, and deploy a VM on it
- Logout, Login as a root admin
- Deploy a VM in the VPC tier (it won't show the tier in UI, nor allow in
API) (however, root admin was found to be able to create a new VPC tier in the
VPC owned by T1 user)
Error seen in API:
> deploy virtualmachine
serviceofferingid=1bcaaebd-a6c6-4363-949e-77d00502992f
templateid=711ee0f1-297f-41fe-9610-e2c93c00c0d2
zoneid=f992179a-4f24-4d22-9033-685b5af67214
networkids=b518afc5-0c2a-4a0b-a225-fcdee0b40f11 name=test123
🙈 Error: (HTTP 531, error code 4365) Unable to use network with id=
b518afc5-0c2a-4a0b-a225-fcdee0b40f11, permission denied
##### ISSUE TYPE
<!-- Pick one below and delete the rest -->
* Bug Report
##### COMPONENT NAME
<!--
Categorize the issue, e.g. API, VR, VPN, UI, etc.
-->
~~~
VPC
~~~
##### CLOUDSTACK VERSION
<!--
New line separated list of affected versions, commit ID for issues on main
branch.
-->
~~~
4.16, 4.17
~~~
##### CONFIGURATION
<!--
Information about the configuration if relevant, e.g. basic network,
advanced networking, etc. N/A otherwise
-->
Advance zone, KVM
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
