[jira] [Closed] (CLOUDSTACK-6501) IAM - DomainAdmin - When listVirtualMachines is used with listall=true and account and domainId , Vms owned by the account account is not listed.

["Sangeetha Hariharan (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-6501?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sangeetha Hariharan closed CLOUDSTACK-6501.
-------------------------------------------


Tested with latest build from 4.4-forward (after IAM revert):

As DomainAdmin , when listVirtualMachines is used with listall=true and account and domainId , we are able to list all the Vms owned by the account.

Closing this issue.


> IAM - DomainAdmin - When listVirtualMachines is used with listall=true  and account and domainId , Vms owned by the account account is not listed.
> --------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-6501
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6501
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: IAM
>    Affects Versions: 4.4.0
>         Environment: Build from 4.4
>            Reporter: Sangeetha Hariharan
>            Assignee: Min Chen
>            Priority: Critical
>             Fix For: 4.4.0
>
>
> IAM - DomainAdmin - When listVirtualMachines is used with listall=true  and account and domainId , Vms owned by the account is not listed.
> Steps to reproduce the problem:
> Set up:
> Pre Reqs:
> Admin - Creates object
> Domain Admin for d1 - D1 - Creates object - d1
> Domain Admin for d1 - D1/D11
> User account for d1 - D1/D111 - Creates object - d111a
> Domain Admin for d1 - D1/D12
> Domain Admin for d2 - D2 - Creates object -d2
> User Account in domain D1 - userD1-1 - Creates object -d1a
> User Account in domain D1 - userD1-2 - Creates object - d1b
> Domain Account in domain D1/D11 - D11 - Creates object - d11
> User Account in domain D1/D11 - userD1-a - Creates object - d11a
> User Account in domain D1/D11 - userD1-a - Creates object - d11b
> User Account in domain D1/D12- userD1-b - Creates object - d12a
> User Account in domain D1/D12 - userD-a - Creates object - d12b
> As domain admin  account D1 , try to list all the Vms for d11 (domain admin user) using account and domainId parameters.
> Expected Result:
> Vm owned by the account that is passed in account/domainId parameter.
> Actual Result:
> Empty set is returned.
> GET http://10.223.49.6/client/api?command=listVirtualMachines&domainId=0e8d9d60-c39a-4304-b048-1e63500d0d30&account=testD11&listAll=true&isrecursive=true&apiKey=bW1FEJkIERji0cWRNQqvmWOgOINjMeBggyoPsMjN9_Qnvq-QtC6L4ORqmbdfQ-XtUYQdSoJIniZrHK3_oi9pcQ&signature=5qLgaWzslWKSz%2FXbVSK0zdj%2B49I%3D \n\n
> current Time:  Thu Apr 24 14:43:18 PDT 2014
> <?xml version="1.0" encoding="UTF-8"?><listvirtualmachinesresponse cloud-stack-version="4.4.0-SNAPSHOT"></listvirtualmachinesresponse>Connection to 10.223.49.6 8080 port [tcp/webcache] succeeded!
> Response Time(in secs) :  0  current Time:  Thu Apr 24 14:43:18 PDT 2014



--
This message was sent by Atlassian JIRA
(v6.2#6252)