You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "Alena Prokharchyk (JIRA)" <ji...@apache.org> on 2013/06/25 00:36:20 UTC

[jira] [Resolved] (CLOUDSTACK-3169) [EIP/ELB] [Projects] associateIpAddress fails when executed by non-ROOT admin account from projects view

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-3169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alena Prokharchyk resolved CLOUDSTACK-3169.
-------------------------------------------

    Resolution: Fixed
    
> [EIP/ELB] [Projects] associateIpAddress fails when executed by non-ROOT admin account from projects view
> --------------------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-3169
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3169
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>    Affects Versions: 4.2.0
>            Reporter: Alena Prokharchyk
>            Assignee: Alena Prokharchyk
>             Fix For: 4.2.0
>
>
> Steps to reproduce : 
> 1. Have at least 1 EIP/ELB enabled zone using the latest 3.0.x code. 
> 2. Create a project 
> 3. Have at least one non-ROOT domain admin as owner of the above project. 
> 4. Execute associate IpAddress API to associate an EIP address 
> Observations: 
> (i) It fails with the following error 
> 2013-06-17 23:01:49,369 DEBUG [cloud.api.ApiServer] (catalina-exec-9:null) (userId=3 accountId=3 sessionId=null) 10.252.112.227 -- GET apiKey=m8y-aWlT5lopDACScCb022A_v0dnRM6-fmYOdqFLDdIzJhyoYY_I1TVauT2wL9fWBpQHMnhLCVF2UdMJ9dbBNQ&command=associateIpAddress&networkid=86ed62de-6250-47c6-b9b3-45dbbc1d7ad1&projectid=ac67765c-e9b0-417a-81e4-0dff71ce00c6&response=json&zoneid=c9c8792b-8bc6-4b60-b32e-6ca7dfb43ff3&signature=2sKP4oCfm87ka6DBrVUmeZQryjk%3D 531 Acct[3-dom1Acc1] does not have permission to operate with resource Acct[1-system] 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira