You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by "kiranchavala (via GitHub)" <gi...@apache.org> on 2025/05/29 10:46:15 UTC
[I] Default Admin user should not be allowed to change its ROLE type [cloudstack]
kiranchavala opened a new issue, #10931:
URL: https://github.com/apache/cloudstack/issues/10931
### The required feature described as a wish
1. Currently, the default admin user is allowed to change their own Role type
2. If the default admin user changes the role type to user role by mistake, the default admin is locked out completely
3. Currently, there is no option to delete the default admin account and user( which is good) , the same functionality should be extended to role type
Expected behaviour
The role type of default admin should be set to Root admin and not allowed to change by admin
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Default Admin user should not be allowed to change its ROLE type [cloudstack]
Posted by "fmaximus (via GitHub)" <gi...@apache.org>.
fmaximus commented on issue #10931:
URL: https://github.com/apache/cloudstack/issues/10931#issuecomment-3015049476
Server side already seems to block any changes to the system account.
https://github.com/apache/cloudstack/blob/16c60c7528a3ee731bceaa9113d5e6a76b22a246/server/src/main/java/com/cloud/user/AccountManagerImpl.java#L2266
So this would be UI improvements only to hide edit button:
https://github.com/apache/cloudstack/blob/16c60c7528a3ee731bceaa9113d5e6a76b22a246/ui/src/config/section/account.js#L125
By the way, shouldn't https://github.com/apache/cloudstack/blob/16c60c7528a3ee731bceaa9113d5e6a76b22a246/ui/src/config/section/account.js#L187
be calling lockAccount api instead of disableAccount.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Default Admin user should not be allowed to change its ROLE type [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland closed issue #10931: Default Admin user should not be allowed to change its ROLE type
URL: https://github.com/apache/cloudstack/issues/10931
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Default Admin user should not be allowed to change its ROLE type [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland commented on issue #10931:
URL: https://github.com/apache/cloudstack/issues/10931#issuecomment-3017993966
hey @fmaximus , welcome back ;) I think you are right about the api call. I also see that both blocks pass the ‘lock’ parameter. Not sure if that is a c&p feature as well, but it looks strange at least.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org