You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "lujie (Jira)" <ji...@apache.org> on 2021/03/23 05:08:00 UTC
[jira] [Updated] (CLOUDSTACK-10434) some APIs need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
lujie updated CLOUDSTACK-10434:
-------------------------------
Summary: some APIs need access check (was: some APIs in VolumeApiServiceImpl need access check)
> some APIs need access check
> ---------------------------
>
> Key: CLOUDSTACK-10434
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the default.)
> Reporter: lujie
> Priority: Blocker
>
> I think some APIs in VolumeApiServiceImpl lack access check. I will list them in below table. Anyone chould change this table. If you think the APIs do not need access check, change its lable as "no".
> ||API||Lack?||
> |updateVolume|yes|
> |detachVolumeViaDestroyVM|yes|
> |takeSnapshot|yes|
> |migrateVolume|yes|
--
This message was sent by Atlassian Jira
(v8.3.4#803005)