You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cloudstack.apache.org by "correajl (via GitHub)" <gi...@apache.org> on 2023/09/04 11:19:18 UTC

[GitHub] [cloudstack] correajl opened a new issue, #7937: Restricting instance deletion to the creator.

correajl opened a new issue, #7937:
URL: https://github.com/apache/cloudstack/issues/7937

   ##### ISSUE TYPE
   <!-- Pick one below and delete the rest -->
    * Enhancement Request
   
   ##### CLOUDSTACK VERSION
   <!--
   New line separated list of affected versions, commit ID for issues on main branch.
   -->
   
   ~~~
   All
   ~~~
   
   ##### SUMMARY
   <!-- Explain the problem/feature briefly -->
   It will be important if we can restrict deletion of an instance to the creator only. 
   
   For example, in a Project with some users. If user A creates an instance, only user A can delete it. This will avoid one user to delete instances from another by mistake. 
   
   The main scope of this feature is "Project", where more than one user can delete instances. "Project Admin" should always delete any instance to keep the administration role. But, there should be a role (maybe normal user) under this restriction. 
   
   The changes can be made in destroyVirtualMachine() API. API can identify in what Project the instance is, so check if only.owner.delete is true and limit the API actions. 
   
   ##### STEPS TO REPRODUCE
   Inside a Project, if a user creates an instance, another user can delete it. 
   
   <!-- You can also paste gist.github.com links for larger files -->
   
   ##### EXPECTED RESULTS
   <!-- What did you expect to happen when running the steps above? -->
   
   ~~~
   Some control as a user can't delete instances that he/she didn't create, or ask for approval from the owner. 
   ~~~
   
   ##### ACTUAL RESULTS
   <!-- What actually happened? -->
   
   <!-- Paste verbatim command output between quotes below -->
   ~~~
   Instances are deleted. 
   ~~~
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [cloudstack] DaanHoogland commented on issue #7937: Restricting instance deletion to the creator.

Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.

DaanHoogland commented on issue #7937:
URL: https://github.com/apache/cloudstack/issues/7937#issuecomment-1740615800

   I don't agree with this functionality, projects are meant for sharing resources. The domain/account hierarchy is meant for this kind of security functionality.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [cloudstack] weizhouapache commented on issue #7937: Restricting instance deletion to the creator.

Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.

weizhouapache commented on issue #7937:
URL: https://github.com/apache/cloudstack/issues/7937#issuecomment-1705155624

   @correajl 
   as @NuxRo @rajujith replied in the mailing list, it is not possible for now.
   
   The owner of project resources is the project account, not specific user accounts.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Restricting instance deletion to the creator. [cloudstack]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on issue #7937:
URL: https://github.com/apache/cloudstack/issues/7937#issuecomment-3802702374

   This issue is stale because it has been open for 120 days with no activity. It may be removed by administrators of this project at any time. Remove the stale label or comment to request for removal of it to prevent this.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Restricting instance deletion to the creator. [cloudstack]

Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.

DaanHoogland closed issue #7937: Restricting instance deletion to the creator.
URL: https://github.com/apache/cloudstack/issues/7937


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org