You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cloudstack.apache.org by "Rohit Yadav (JIRA)" <ji...@apache.org> on 2015/03/23 11:50:11 UTC

[jira] [Closed] (CLOUDSTACK-7283) Allow regular user to execute listUsers API call

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-7283?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rohit Yadav closed CLOUDSTACK-7283.
-----------------------------------
    Resolution: Fixed

Fixed but not resolved.

> Allow regular user to execute listUsers API call
> ------------------------------------------------
>
>                 Key: CLOUDSTACK-7283
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7283
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: API, Doc
>    Affects Versions: 4.5.0
>            Reporter: Alena Prokharchyk
>             Fix For: 4.5.1
>
>
> Since normal-user role can have access to listAccounts API that returns user info + he can update users info by calling updateUser, he should have an access to listUsers API. The response should return his user info only. Other users belonging to the same user's account, shouldn't be returned.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)