Sangeetha Hariharan created CLOUDSTACK-6742:
-----------------------------------------------

             Summary: listVolumes - As regularuser , able to list Vms and 
volumes of other users.
                 Key: CLOUDSTACK-6742
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6742
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Management Server
    Affects Versions: 4.4.0
         Environment: Build from 4.4
            Reporter: Sangeetha Hariharan
            Priority: Critical
             Fix For: 4.4.0


listVolumes - As regularuser , able to list Vms of other users and as domain 
admin , able to list Vms from other domains.

Steps to reproduce the problem:
Had a set up with 2 domains having few users accounts in each domain.
Deploy Vms as each of these users.

As any user , we are able to list Vms that belong to all other users including 
ROOT admin and domain Admin users.





--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to