You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@cloudstack.apache.org by Nick Wales <ni...@nickwales.co.uk> on 2013/03/30 06:24:10 UTC

API call 'listVolumes' permissions

If I set 'listall' to true while querying as the admin user in the ROOT
domain, I can see the vast majority of volumes but not those belonging to
other users in subdomains of ROOT.

Is that the intended behaviour?

If so how could I go about giving the ROOT admin user or another admin user
such permission that they can see every single volume in every domain and
subdomain?

Thanks

Nick

RE: API call 'listVolumes' permissions

Posted by Pranav Saxena <pr...@citrix.com>.

This is definitely a bug then  . Please file it . This is how you should expect listVolumes to behave - 

http://download.cloud.com/releases/3.0.0/api_3.0.0/root_admin/listVolumes.html

Thanks,
Pranav

-----Original Message-----
From: Nick Wales [mailto:nick@nickwales.co.uk] 
Sent: Sunday, March 31, 2013 9:31 PM
To: users@cloudstack.apache.org
Subject: Re: API call 'listVolumes' permissions

Thanks Nitin, I realised the only volumes I can't see are those in a project in the subdomain which belong to a different user. Still, I may be wrong but I'd expect the ROOT domain admin user to be able to see everything everywhere.

I can see the project if I use 'listall = true" in listProjects but not otherwise.  listall on listVolumes doesn't have the same impact.

I tried specifying the domain id and isRecursive = true but it had no impact.

If this is a bug I'll file it.

Thanks,
Nick

On 31 March 2013 04:55, Nitin Mehta <Ni...@citrix.com> wrote:

>
> Hi Nick -
> He should be able to all the resources belonging to the subdomains as 
> well. Please file a bug if you don't see the behavior AS a workaround 
> you can try passing the domain id of ROOT domain along with 
> isRecursive = true. See if that works for you.
>
> Thanks,
> -Nitin
>
> On 30/03/13 10:54 AM, "Nick Wales" <ni...@nickwales.co.uk> wrote:
>
> >If I set 'listall' to true while querying as the admin user in the 
> >ROOT domain, I can see the vast majority of volumes but not those 
> >belonging to other users in subdomains of ROOT.
> >
> >Is that the intended behaviour?
> >
> >If so how could I go about giving the ROOT admin user or another 
> >admin user such permission that they can see every single volume in 
> >every domain and subdomain?
> >
> >Thanks
> >
> >Nick
>
>

Re: API call 'listVolumes' permissions

Posted by Nick Wales <ni...@nickwales.co.uk>.

Thanks Nitin, I realised the only volumes I can't see are those in a
project in the subdomain which belong to a different user. Still, I may be
wrong but I'd expect the ROOT domain admin user to be able to see
everything everywhere.

I can see the project if I use 'listall = true" in listProjects but not
otherwise.  listall on listVolumes doesn't have the same impact.

I tried specifying the domain id and isRecursive = true but it had no
impact.

If this is a bug I'll file it.

Thanks,
Nick

On 31 March 2013 04:55, Nitin Mehta <Ni...@citrix.com> wrote:

>
> Hi Nick -
> He should be able to all the resources belonging to the subdomains as
> well. Please file a bug if you don't see the behavior
> AS a workaround you can try passing the domain id of ROOT domain along
> with isRecursive = true. See if that works for you.
>
> Thanks,
> -Nitin
>
> On 30/03/13 10:54 AM, "Nick Wales" <ni...@nickwales.co.uk> wrote:
>
> >If I set 'listall' to true while querying as the admin user in the ROOT
> >domain, I can see the vast majority of volumes but not those belonging to
> >other users in subdomains of ROOT.
> >
> >Is that the intended behaviour?
> >
> >If so how could I go about giving the ROOT admin user or another admin
> >user
> >such permission that they can see every single volume in every domain and
> >subdomain?
> >
> >Thanks
> >
> >Nick
>
>

Re: API call 'listVolumes' permissions

Posted by Nitin Mehta <Ni...@citrix.com>.

Hi Nick - 
He should be able to all the resources belonging to the subdomains as
well. Please file a bug if you don't see the behavior
AS a workaround you can try passing the domain id of ROOT domain along
with isRecursive = true. See if that works for you.

Thanks,
-Nitin

On 30/03/13 10:54 AM, "Nick Wales" <ni...@nickwales.co.uk> wrote:

>If I set 'listall' to true while querying as the admin user in the ROOT
>domain, I can see the vast majority of volumes but not those belonging to
>other users in subdomains of ROOT.
>
>Is that the intended behaviour?
>
>If so how could I go about giving the ROOT admin user or another admin
>user
>such permission that they can see every single volume in every domain and
>subdomain?
>
>Thanks
>
>Nick