luganofer opened a new issue, #10886:
URL: https://github.com/apache/cloudstack/issues/10886

   ### The required feature described as a wish
   
   ### Description
   
   This proposal introduces an enhancement to the CloudStack UI and API to 
allow administrators to enable or disable the ability for end users to create 
new compute and disk offerings, through a Global Setting.
   
   In environments where strict governance or pre-approved resource 
configurations are required, it is useful to prevent users from creating custom 
service offerings, while still allowing administrators to manage and offer 
pre-defined options.
   
   ### Feature Summary
   
   * Introduce one or more Global Settings to control:
    ** Whether end users can create compute (service) offerings
    ** Whether end users can create disk offerings
   * Optional enhancement: allow this control to be zone-specific via scoped 
settings or dynamic checks.
   
   
   ### Use Case
   
   CloudStack installations used in multi-tenant environments, or those 
operated by service providers, often need to limit the customization of 
offerings to admins only, to ensure compliance with internal policies, cost 
control, and performance baselines.
   
   This feature would allow:
   
   * Disabling offering creation for end users in production zones while 
enabling it in sandbox/test zones
   * Preventing accidental or non-compliant offering creation in shared 
environments
   * Improving UX by hiding or disabling the relevant UI options when not 
permitted
   
   ### Proposed Changes
   1) Introduce two new global settings:
   * allow.user.create.service.offering (default: true)
   * allow.user.create.disk.offering (default: true)
   2) (Optional) Extend setting to support zone-specific override
   3) Modify UI and API behavior to check these settings:
   * Hide or disable relevant buttons/forms if disabled
   * Reject API requests with an appropriate error if blocked


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@cloudstack.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to