[jira] [Created] (CLOUDSTACK-7073) Account/User creation: able to create account/user with the same name in the same domain in Clustered MS setup

["Alena Prokharchyk (JIRA)" <ji...@apache.org>]

Alena Prokharchyk created CLOUDSTACK-7073:
---------------------------------------------

             Summary: Account/User creation: able to create account/user with the same name in the same domain in Clustered MS setup
                 Key: CLOUDSTACK-7073
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7073
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Management Server
    Affects Versions: 4.5.0
            Reporter: Alena Prokharchyk
            Assignee: Alena Prokharchyk
             Fix For: 4.5.0


In the Java code we prohibit user/account to have duplicated names inside the same domain. But in the DB the constraint is missing in cloud.account/cloud.user table, so it is still possible to violate the rule by initiating the create call from parallel threads issued either by the same MS, or by multiple MS in the clustered MS setup.

To fix:

a) in cloud.account table, add constraint on "account_name"/"domain_id" combo. It will fix createAccount call.

b) for the user creation, issue global lock on the corresponding account object. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)