[
https://issues.apache.org/jira/browse/CLOUDSTACK-6742?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sangeetha Hariharan closed CLOUDSTACK-6742.
-------------------------------------------
Tested with latest build from 4.4 (after IAM revert).
As regular users, we are able to list only the vms and volumes that belong to
this account.
> listVolumes - As regularuser , able to list Vms and volumes of other users.
> ---------------------------------------------------------------------------
>
> Key: CLOUDSTACK-6742
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6742
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Management Server
> Affects Versions: 4.4.0
> Environment: Build from 4.4
> Reporter: Sangeetha Hariharan
> Assignee: Min Chen
> Priority: Critical
> Fix For: 4.4.0
>
>
> listVolumes - As regularuser , able to list Vms of other users and as domain
> admin , able to list Vms from other domains.
> Steps to reproduce the problem:
> Had a set up with 2 domains having few users accounts in each domain.
> Deploy Vms as each of these users.
> As any user , we are able to list Vms and volumes that belong to all other
> users including ROOT admin and domain Admin users.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
