shwstppr commented on PR #9090: URL: https://github.com/apache/cloudstack/pull/9090#issuecomment-2124072101
@rajujith @andrijapanicsb I've created this PR to allow API access for accounts within the project irrespective of their account role. Though this would give them access to info which is otherwise not accessible to them. The other option could be disallowing adding accounts to project with a projectrole which has higher access than their account role. (ie, `testrole` is a ProjectRole inside project which has `listRouters` API access. ACS will throw an error when project admin tries to add an account which has a role which doesn't have `listRouters` API access). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
