hsato03 commented on PR #7853: URL: https://github.com/apache/cloudstack/pull/7853#issuecomment-1675170869
Hello @rohityadavcloud. You can test it by doing the same tests I did. Before the changes, the account will be created and no exception will be thrown. - Create a domain admin custom role (DA2) and allow all APIs to it using the `*` regex; - Still in DA2, remove an API that it has in common with the default domain admin role (`listProjects` for an example); - Login into a DA2 account and try to create an account that has the default domain admin role; - The account should not be created as the caller role (DA2) does not have a permission (`listProjects`) that the role's account being created has (default domain admin). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
