[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-3169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13694324#comment-13694324
 ] 

ASF subversion and git services commented on CLOUDSTACK-3169:
-------------------------------------------------------------

Commit 728145f3b142b85bfe464d2069237cae99e0b25b in branch 
refs/heads/master-6-17-stable from [~alena1108]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=728145f ]

CLOUDSTACK-3169: ipAssoc - set account id of the ip to the project account. 
Used to be set to the network owner which is System in Shared network case, and 
the further verification used to fail because of that

                
> [EIP/ELB] [Projects] associateIpAddress fails when executed by non-ROOT admin 
> account from projects view
> --------------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-3169
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3169
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>    Affects Versions: 4.2.0
>            Reporter: Alena Prokharchyk
>            Assignee: Alena Prokharchyk
>             Fix For: 4.2.0
>
>
> Steps to reproduce : 
> 1. Have at least 1 EIP/ELB enabled zone using the latest 3.0.x code. 
> 2. Create a project 
> 3. Have at least one non-ROOT domain admin as owner of the above project. 
> 4. Execute associate IpAddress API to associate an EIP address 
> Observations: 
> (i) It fails with the following error 
> 2013-06-17 23:01:49,369 DEBUG [cloud.api.ApiServer] (catalina-exec-9:null) 
> (userId=3 accountId=3 sessionId=null) 10.252.112.227 -- GET 
> apiKey=m8y-aWlT5lopDACScCb022A_v0dnRM6-fmYOdqFLDdIzJhyoYY_I1TVauT2wL9fWBpQHMnhLCVF2UdMJ9dbBNQ&command=associateIpAddress&networkid=86ed62de-6250-47c6-b9b3-45dbbc1d7ad1&projectid=ac67765c-e9b0-417a-81e4-0dff71ce00c6&response=json&zoneid=c9c8792b-8bc6-4b60-b32e-6ca7dfb43ff3&signature=2sKP4oCfm87ka6DBrVUmeZQryjk%3D
>  531 Acct[3-dom1Acc1] does not have permission to operate with resource 
> Acct[1-system] 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to