[jira] [Commented] (CLOUDSTACK-7129) Non-admin user can use deleteNetwork with shared networks

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-7129?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14066299#comment-14066299 ] 

ASF subversion and git services commented on CLOUDSTACK-7129:
-------------------------------------------------------------

Commit 2f293f42d567b1218cb083250707eeffc5324dc3 in cloudstack's branch refs/heads/master from [~murali.reddy]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=2f293f4 ]

CLOUDSTACK-7129: Non-admin user can use deleteNetwork with shared
networks

fix ensures only admin users can delete shared network


> Non-admin user can use deleteNetwork with shared networks
> ---------------------------------------------------------
>
>                 Key: CLOUDSTACK-7129
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7129
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Network Controller
>    Affects Versions: 4.0.0, 4.1.0, 4.2.0, 4.3.0, 4.4.0
>            Reporter: Murali Reddy
>            Assignee: Murali Reddy
>            Priority: Critical
>             Fix For: 4.4.0
>
>
> It should not be possible to for a non-admin user to delete a shared network, just like a non-admin user can not create a shared network. A regular user can currently call deleteNetwork on a shared network if it is account-specific and owned by the account of the user. This call will succeed if there are no VMs or virtual routers in the network.



--
This message was sent by Atlassian JIRA
(v6.2#6252)