You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by pdion891 <gi...@git.apache.org> on 2017/04/04 21:12:33 UTC

[GitHub] cloudstack issue #1834: CLOUDSTACK-9679:Allow master user to manage subordin...

Github user pdion891 commented on the issue:

    https://github.com/apache/cloudstack/pull/1834
  
    @pdumbre @karuturi @syed 
    I thinks this introduce an issue where a domain admin cannot get a template by id. 
    a domain admin can list feature template and get a template via `ids=` but not with `id=`
    The example bellow is perform with a domain admin account to list public+featured template at root domain:
    
    ```
    (beta2r1-ninja) > list templates templatefilter=featured filter=name,id
    count = 9
    template:
    +--------------------------------------+---------------------------------+
    |                  id                  |               name              |
    +--------------------------------------+---------------------------------+
    | 513b3a6d-c011-46f0-a4a3-2a954cadb673 |      CoreOS Alpha 1367.5.0      |
    | 0c04d876-1f85-45a7-b6f4-504de435bf12 |    Debian 8.5 PV base (64bit)   |
    | 285f2203-449a-428f-997a-1ffbebbf1382 |           CoreOS Alpha          |
    | 332b6ca8-b3d6-42c7-83e5-60fe87be6576 |          CoreOS Stable          |
    | 3b705008-c186-464d-ad59-312d902420af |   Windows Server 2016 std SPLA  |
    | 4256aebe-a1c1-4b49-9993-de2bc712d521 |       Ubuntu 16.04.01 HVM       |
    | 59e6b00a-b88e-4539-aa3c-75c9c7e9fa6c | Ubuntu 14.04.5 HVM base (64bit) |
    | 3ab936eb-d8c2-44d8-a64b-17ad5adf8a51 |          CentOS 6.8 PV          |
    | 7de5d423-c91e-49cc-86e8-9d6ed6abd997 |          CentOS 7.2 HVM         |
    +--------------------------------------+---------------------------------+
    (beta2r1-ninja) > list templates templatefilter=featured id=7de5d423-c91e-49cc-86e8-9d6ed6abd997 filter=name,id
    Error 531: Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not have permission to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9
    cserrorcode = 4365
    errorcode = 531
    errortext = Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not have permission to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9
    uuidList:
    (beta2r1-ninja) > list templates templatefilter=featured ids=7de5d423-c91e-49cc-86e8-9d6ed6abd997 filter=name,id
    count = 1
    template:
    +--------------------------------------+----------------+
    |                  id                  |      name      |
    +--------------------------------------+----------------+
    | 7de5d423-c91e-49cc-86e8-9d6ed6abd997 | CentOS 7.2 HVM |
    +--------------------------------------+----------------+
    ```


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---