There is one glaring problem with preventing users from creating templates, you also remove the ability to restore a VM from a snapshot as this requires the creation of a new template.
Regards Geoff Higginbottom CTO / Cloud Architect D: +44 20 3603 0542<tel:+442036030542> | S: +44 20 3603 0540<tel:+442036030540>| M: +447968161581<tel:+447968161581> [email protected]<mailto:[email protected]> |www.shapeblue.com | Twitter:@shapeblue<https://twitter.com/#!/shapeblue> ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS On 25 Jul 2013, at 09:55, "Nitin Mehta" <[email protected]<mailto:[email protected]>> wrote: You can also set the resource limit for the users as 0 (change the max.template limit in the global config). This would not allow them to submit any template or create template from volume/snapshot or copy template. In case you want to give permissions to specific users you can manage through this as well. If you want to go through Chips route you need to change the permissions for register Template/ISO, copyTemplate/Iso, createTemplate Thanks, -Nitin On 25/07/13 2:14 AM, "Alena Prokharchyk" <[email protected]<mailto:[email protected]>> wrote: There are just couple of template related global configs: allow.public.user.templates - If false, users will not be able to create public templates. max.template.iso.size - The maximum size for a downloaded template or ISO (in GB). You can set max.template.iso.size to 0, and user won't be able to download anything. Or as Chip stated already, you can change the permission in commands.properties for createTemplate command. -Alena. From: Chip Childers <[email protected]<mailto:[email protected]><mailto:[email protected]>> Reply-To: "[email protected]<mailto:[email protected]><mailto:[email protected]>" <[email protected]<mailto:[email protected]><mailto:[email protected]>> Date: Wednesday, July 24, 2013 12:04 PM To: "<[email protected]<mailto:[email protected]><mailto:[email protected]>>" <[email protected]<mailto:[email protected]><mailto:[email protected]>> Subject: Re: Disallow users the ability to add templates/ISOs Unless there is a setting somewhere that might do this for you completely, yeah. On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer <[email protected]<mailto:[email protected]><mailto:[email protected]>>wrote: So, even if I were able to disable it for users in the UI, i'd still have to change the API ACL to completely disallow it? On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers <[email protected]<mailto:[email protected]><mailto:[email protected]> wrote: FWIW, I'm not sure about in the UI, but you can change the API's ACL for those commands within the commands.properties file to be root admin only. This will probably leave the UI with the buttons, but will always fail for the users. On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer <[email protected]<mailto:[email protected]><mailto:[email protected]> wrote: I recall it being talked about in the past, but can't seem to find it. Is there a way to disallow users from being able to add their own templates/ISOs? -- Regards, Kirk Jantzer http://about.met/kirkjantzer -- Regards, Kirk Jantzer c: (678) 561-5475 http://about.met/kirkjantzer This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
