[
https://issues.apache.org/jira/browse/CLOUDSTACK-6558?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13987148#comment-13987148
]
ASF subversion and git services commented on CLOUDSTACK-6558:
-------------------------------------------------------------
Commit e89c628843692c9e7046192f5b6d4893b7a45ec6 in cloudstack's branch
refs/heads/4.4-forward from [~prachidamle]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=e89c628 ]
CLOUDSTACK-6558 IAM - Admin user is able to deploy VM in a regular user's
Security Group.
Changes:
- Even for SecurityGroup, go through IAM to do permission checks for all type
of accounts
> IAM - Admin user is able to deploy VM in a regular user's Security Group.
> -------------------------------------------------------------------------
>
> Key: CLOUDSTACK-6558
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6558
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: IAM
> Affects Versions: 4.4.0
> Environment: Build from 4.4
> Reporter: Sangeetha Hariharan
> Assignee: Prachi Damle
> Priority: Critical
> Fix For: 4.4.0
>
>
> IAM - Admin user is able to deploy VM in a regular user's Security Group.
> Steps to reproduce the problem:
> Basic Zone set up:
> As regular user , create a Security group.
> As admin , try to deploy a VM using this security group.
> Admin is allowed to deploy a VM using this security group.
> Expected Result:
> Admin should not be allowed to deploy a VM using regular user's security
> group.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
