You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Kirk Jantzer <ki...@gmail.com> on 2013/07/24 20:46:38 UTC
Disallow users the ability to add templates/ISOs
I recall it being talked about in the past, but can't seem to find it. Is
there a way to disallow users from being able to add their own
templates/ISOs?
--
Regards,
Kirk Jantzer
http://about.met/kirkjantzer
Re: Disallow users the ability to add templates/ISOs
Posted by Geoff Higginbottom <ge...@shapeblue.com>.
There is one glaring problem with preventing users from creating templates, you also remove the ability to restore a VM from a snapshot as this requires the creation of a new template.
Regards
Geoff Higginbottom
CTO / Cloud Architect
D: +44 20 3603 0542<tel:+442036030542> | S: +44 20 3603 0540<tel:+442036030540>| M: +447968161581<tel:+447968161581>
geoff.higginbottom@shapeblue.com<ma...@shapeblue.com> |www.shapeblue.com | Twitter:@shapeblue<https://twitter.com/#!/shapeblue>
ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS
On 25 Jul 2013, at 09:55, "Nitin Mehta" <Ni...@citrix.com>> wrote:
You can also set the resource limit for the users as 0 (change the
max.template limit in the global config).
This would not allow them to submit any template or create template from
volume/snapshot or copy template.
In case you want to give permissions to specific users you can manage
through this as well.
If you want to go through Chips route you need to change the permissions
for register Template/ISO, copyTemplate/Iso, createTemplate
Thanks,
-Nitin
On 25/07/13 2:14 AM, "Alena Prokharchyk" <Al...@citrix.com>>
wrote:
There are just couple of template related global configs:
allow.public.user.templates - If false, users will not be able to create
public templates.
max.template.iso.size - The maximum size for a downloaded template or ISO
(in GB).
You can set max.template.iso.size to 0, and user won't be able to
download anything.
Or as Chip stated already, you can change the permission in
commands.properties for createTemplate command.
-Alena.
From: Chip Childers
<ch...@sungard.com>>
Reply-To:
"users@cloudstack.apache.org<ma...@cloudstack.apache.org>"
<us...@cloudstack.apache.org>>
Date: Wednesday, July 24, 2013 12:04 PM
To: "<us...@cloudstack.apache.org>>"
<us...@cloudstack.apache.org>>
Subject: Re: Disallow users the ability to add templates/ISOs
Unless there is a setting somewhere that might do this for you completely,
yeah.
On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer
<ki...@gmail.com>>wrote:
So, even if I were able to disable it for users in the UI, i'd still have
to change the API ACL to completely disallow it?
On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers
<ch...@sungard.com>
wrote:
FWIW, I'm not sure about in the UI, but you can change the API's ACL for
those commands within the commands.properties file to be root admin
only.
This will probably leave the UI with the buttons, but will always fail
for
the users.
On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer
<ki...@gmail.com>
wrote:
I recall it being talked about in the past, but can't seem to find it.
Is
there a way to disallow users from being able to add their own
templates/ISOs?
--
Regards,
Kirk Jantzer
http://about.met/kirkjantzer
--
Regards,
Kirk Jantzer
c: (678) 561-5475
http://about.met/kirkjantzer
This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Disallow users the ability to add templates/ISOs
Posted by Nitin Mehta <Ni...@citrix.com>.
You can also set the resource limit for the users as 0 (change the
max.template limit in the global config).
This would not allow them to submit any template or create template from
volume/snapshot or copy template.
In case you want to give permissions to specific users you can manage
through this as well.
If you want to go through Chips route you need to change the permissions
for register Template/ISO, copyTemplate/Iso, createTemplate
Thanks,
-Nitin
On 25/07/13 2:14 AM, "Alena Prokharchyk" <Al...@citrix.com>
wrote:
>There are just couple of template related global configs:
>
>allow.public.user.templates - If false, users will not be able to create
>public templates.
>max.template.iso.size - The maximum size for a downloaded template or ISO
>(in GB).
>
>You can set max.template.iso.size to 0, and user won't be able to
>download anything.
>Or as Chip stated already, you can change the permission in
>commands.properties for createTemplate command.
>
>-Alena.
>
>From: Chip Childers
><ch...@sungard.com>>
>Reply-To:
>"users@cloudstack.apache.org<ma...@cloudstack.apache.org>"
><us...@cloudstack.apache.org>>
>Date: Wednesday, July 24, 2013 12:04 PM
>To: "<us...@cloudstack.apache.org>>"
><us...@cloudstack.apache.org>>
>Subject: Re: Disallow users the ability to add templates/ISOs
>
>Unless there is a setting somewhere that might do this for you completely,
>yeah.
>
>
>On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer
><ki...@gmail.com>>wrote:
>
>So, even if I were able to disable it for users in the UI, i'd still have
>to change the API ACL to completely disallow it?
>
>
>On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers
><ch...@sungard.com>
>>wrote:
>
>> FWIW, I'm not sure about in the UI, but you can change the API's ACL for
>> those commands within the commands.properties file to be root admin
>>only.
>>
>> This will probably leave the UI with the buttons, but will always fail
>for
>> the users.
>>
>>
>> On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer
>><ki...@gmail.com>
>> >wrote:
>>
>> > I recall it being talked about in the past, but can't seem to find it.
>Is
>> > there a way to disallow users from being able to add their own
>> > templates/ISOs?
>> >
>> > --
>> > Regards,
>> >
>> > Kirk Jantzer
>> > http://about.met/kirkjantzer
>> >
>>
>
>
>
>--
>Regards,
>
>Kirk Jantzer
>c: (678) 561-5475
>http://about.met/kirkjantzer
>
>
Re: Disallow users the ability to add templates/ISOs
Posted by Alena Prokharchyk <Al...@citrix.com>.
There are just couple of template related global configs:
allow.public.user.templates - If false, users will not be able to create public templates.
max.template.iso.size - The maximum size for a downloaded template or ISO (in GB).
You can set max.template.iso.size to 0, and user won't be able to download anything.
Or as Chip stated already, you can change the permission in commands.properties for createTemplate command.
-Alena.
From: Chip Childers <ch...@sungard.com>>
Reply-To: "users@cloudstack.apache.org<ma...@cloudstack.apache.org>" <us...@cloudstack.apache.org>>
Date: Wednesday, July 24, 2013 12:04 PM
To: "<us...@cloudstack.apache.org>>" <us...@cloudstack.apache.org>>
Subject: Re: Disallow users the ability to add templates/ISOs
Unless there is a setting somewhere that might do this for you completely,
yeah.
On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer <ki...@gmail.com>>wrote:
So, even if I were able to disable it for users in the UI, i'd still have
to change the API ACL to completely disallow it?
On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers <ch...@sungard.com>
>wrote:
> FWIW, I'm not sure about in the UI, but you can change the API's ACL for
> those commands within the commands.properties file to be root admin only.
>
> This will probably leave the UI with the buttons, but will always fail
for
> the users.
>
>
> On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer <ki...@gmail.com>
> >wrote:
>
> > I recall it being talked about in the past, but can't seem to find it.
Is
> > there a way to disallow users from being able to add their own
> > templates/ISOs?
> >
> > --
> > Regards,
> >
> > Kirk Jantzer
> > http://about.met/kirkjantzer
> >
>
--
Regards,
Kirk Jantzer
c: (678) 561-5475
http://about.met/kirkjantzer
Re: Disallow users the ability to add templates/ISOs
Posted by Chip Childers <ch...@sungard.com>.
Unless there is a setting somewhere that might do this for you completely,
yeah.
On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer <ki...@gmail.com>wrote:
> So, even if I were able to disable it for users in the UI, i'd still have
> to change the API ACL to completely disallow it?
>
>
> On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers <chip.childers@sungard.com
> >wrote:
>
> > FWIW, I'm not sure about in the UI, but you can change the API's ACL for
> > those commands within the commands.properties file to be root admin only.
> >
> > This will probably leave the UI with the buttons, but will always fail
> for
> > the users.
> >
> >
> > On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer <kirk.jantzer@gmail.com
> > >wrote:
> >
> > > I recall it being talked about in the past, but can't seem to find it.
> Is
> > > there a way to disallow users from being able to add their own
> > > templates/ISOs?
> > >
> > > --
> > > Regards,
> > >
> > > Kirk Jantzer
> > > http://about.met/kirkjantzer
> > >
> >
>
>
>
> --
> Regards,
>
> Kirk Jantzer
> c: (678) 561-5475
> http://about.met/kirkjantzer
>
Re: Disallow users the ability to add templates/ISOs
Posted by Kirk Jantzer <ki...@gmail.com>.
So, even if I were able to disable it for users in the UI, i'd still have
to change the API ACL to completely disallow it?
On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers <ch...@sungard.com>wrote:
> FWIW, I'm not sure about in the UI, but you can change the API's ACL for
> those commands within the commands.properties file to be root admin only.
>
> This will probably leave the UI with the buttons, but will always fail for
> the users.
>
>
> On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer <kirk.jantzer@gmail.com
> >wrote:
>
> > I recall it being talked about in the past, but can't seem to find it. Is
> > there a way to disallow users from being able to add their own
> > templates/ISOs?
> >
> > --
> > Regards,
> >
> > Kirk Jantzer
> > http://about.met/kirkjantzer
> >
>
--
Regards,
Kirk Jantzer
c: (678) 561-5475
http://about.met/kirkjantzer
Re: Disallow users the ability to add templates/ISOs
Posted by Chip Childers <ch...@sungard.com>.
FWIW, I'm not sure about in the UI, but you can change the API's ACL for
those commands within the commands.properties file to be root admin only.
This will probably leave the UI with the buttons, but will always fail for
the users.
On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer <ki...@gmail.com>wrote:
> I recall it being talked about in the past, but can't seem to find it. Is
> there a way to disallow users from being able to add their own
> templates/ISOs?
>
> --
> Regards,
>
> Kirk Jantzer
> http://about.met/kirkjantzer
>