[
https://issues.apache.org/jira/browse/CLOUDSTACK-6742?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14005385#comment-14005385
]
ASF subversion and git services commented on CLOUDSTACK-6742:
-------------------------------------------------------------
Commit 356f6121a78d147d72136044c90472234f667730 in cloudstack's branch
refs/heads/4.4-forward from [~minchen07]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=356f612 ]
CLOUDSTACK-6742: listVolumes - As regularuser , able to list Vms and
volumes of other users.
> listVolumes - As regularuser , able to list Vms and volumes of other users.
> ---------------------------------------------------------------------------
>
> Key: CLOUDSTACK-6742
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6742
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Management Server
> Affects Versions: 4.4.0
> Environment: Build from 4.4
> Reporter: Sangeetha Hariharan
> Priority: Critical
> Fix For: 4.4.0
>
>
> listVolumes - As regularuser , able to list Vms of other users and as domain
> admin , able to list Vms from other domains.
> Steps to reproduce the problem:
> Had a set up with 2 domains having few users accounts in each domain.
> Deploy Vms as each of these users.
> As any user , we are able to list Vms and volumes that belong to all other
> users including ROOT admin and domain Admin users.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
