[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-2989?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13741377#comment-13741377
 ] 

Jessica Wang commented on CLOUDSTACK-2989:
------------------------------------------

Mice,

> 1) only root admin can list network offering with specifyVlan=true  

This API change was wrong. It caused a lot of UI bug.

Normal user should be able to read network offerings (i.e. list network 
offerings) whose spicifyVlan=true.

e.g. root-admin create a network with network offering whose spicifyVlan=true 
for a normal user.
The normal user should be able to read the network's info, including network 
services, network service providers, network offering conserve mode, network 
offering's network rate, etc ~

Alena has reverted this API change.

I'll make an UI change which will disallow normal user to create a network with 
network offering whose spicifyVlan=true.

Jessica
                
> normal user are allowed to create isolated network offerings with vlan 
> assignments
> ----------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-2989
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2989
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>          Components: Network Controller, UI
>    Affects Versions: 4.2.0
>         Environment: build:
> CloudStack-non-OSS-MASTER-472-rhel6.3
>            Reporter: shweta agarwal
>            Assignee: Jessica Wang
>            Priority: Critical
>             Fix For: 4.2.0
>
>
> Repro steps:
> 1. Create a domain and an account within the domain
> 2. Create a network offerings with specify vlan=true  for isolated network 
> 3. Create network with network offering created in step 2 as a domain account 
> created in step 1
> Bug:
> Network creation is successful
> Expected result:
> normal user should not be allowed to create network with specify Vlan=true 
> isolated network
> Even Functional spec  says:
> nly ROOT admin is aware of the Vlans in the system. So only he can create the 
> Isolated network with the vlan defined. UI should handle it and don't display 
> network offerings with "specifyVlan=true" when create a new Isolated network.
> Even  vial Normal user UI 
> Create network dialog shows Network offerings with specify vlan=ture and when 
> I try to create a network offerings it passes also
> So that means both at UI level and api level this condition is not checked

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to