You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Fernando Guillén Camba <fe...@usc.es> on 2014/03/26 11:31:35 UTC

CS 4.1.1 project template issue

Hi all.

A user of our Cloudstack has noticed that when creating a template from 
inside a project in which he is the administrator he can't delete or 
create a VM from it. A permission denied error shows up.
The properties of the template show correct domain but an empty account.
¿Any hints on this?

It seems that this was already noticed by someone on the list around 
last december, but no one replied:

    Hi,

    I spent a few more days experimenting with the CloudStack, and I believe there is indeed a problem with permissions and projects. What I found is that if I create an ISO or a template based on the snapshot in my individual account and make it public, I can the use this ISO or template to create new instances both under my individual account as well as under the project I have created. However, if I create an ISO or a template inside the project, whenever I try to use it I get a similar error message as I have already sent before. Furthermore, after creation, I cannot even edit or delete such ISO or template, the only way to get rid of them is to delete the entire project. I hope this will help to diagnose the problem. Let me know if you need any further information.

    Cloudstack version: 4.1.1

    error:
    ==========
    2013-11-28 11:50:59,845 DEBUG [cloud.api.ApiServlet] (http-8443-20:null) ===START===  146.169.1.7 -- GET  command=updateTemplate&response=json&sessionkey=y3BOUl31eZKpQpYTEtX%2BMjKzHbc%3D&projectid=09da065b-e744-49c4-b8fe-2edb0344d5c3&id=897ab607-6b37-4c11-bab3-da096a8048fd&zoneid=ec3bf9da-f510-49a0-b21d-fb7ecdd5ab67&name=test-prj2&displaytext=test-prj2&ostypeid=7d77166c-1fa2-11e3-809d-38acb5898e2d&passwordenabled=false&_=1385639465477

    2013-11-28 11:50:59,850 INFO  [cloud.api.ApiServer] (http-8443-20:null) PermissionDenied: Domain Admin and regular users can modify only their own Public templates on uuids: []
    ===========


    regards,
    Thomas Joseph


-- 
Fernando Guillén Camba
Unidade de Xestión de Infraestruturas TIC
Centro de Investigación en Tecnoloxías da Información (CITIUS)
Teléfono: 8818 16409
Correo: citius.tic@usc.es


Re: CS 4.1.1 project template issue

Posted by Fernando Guillén Camba <fe...@usc.es>.
OK. Time for an upgrade then.

Thanks for your answer.

El 27/03/14 20:14, Daan Hoogland escribió:
> Fernando,
>
> We don't fix older version for other then security issues and even
> then only in some cases. Companies that sell support do however.
> Citrix being the big example to us all, of course.
>
> regards,
> Daan
>
> On Wed, Mar 26, 2014 at 12:53 PM, Fernando Guillén Camba
> <fe...@usc.es> wrote:
>> I found that this was fixed for 4.2:
>>
>> https://issues.apache.org/jira/browse/CLOUDSTACK-4087
>>
>> Is it going to be fixed in the 4.1 branch or a version upgrade is mandatory?
>>
>>
>> El 26/03/14 11:31, Fernando Guillén Camba escribió:
>>
>>> Hi all.
>>>
>>> A user of our Cloudstack has noticed that when creating a template from
>>> inside a project in which he is the administrator he can't delete or create
>>> a VM from it. A permission denied error shows up.
>>> The properties of the template show correct domain but an empty account.
>>> ¿Any hints on this?
>>>
>>> It seems that this was already noticed by someone on the list around last
>>> december, but no one replied:
>>>
>>>     Hi,
>>>
>>>     I spent a few more days experimenting with the CloudStack, and I
>>> believe there is indeed a problem with permissions and projects. What I
>>> found is that if I create an ISO or a template based on the snapshot in my
>>> individual account and make it public, I can the use this ISO or template to
>>> create new instances both under my individual account as well as under the
>>> project I have created. However, if I create an ISO or a template inside the
>>> project, whenever I try to use it I get a similar error message as I have
>>> already sent before. Furthermore, after creation, I cannot even edit or
>>> delete such ISO or template, the only way to get rid of them is to delete
>>> the entire project. I hope this will help to diagnose the problem. Let me
>>> know if you need any further information.
>>>
>>>     Cloudstack version: 4.1.1
>>>
>>>     error:
>>>     ==========
>>>     2013-11-28 11:50:59,845 DEBUG [cloud.api.ApiServlet]
>>> (http-8443-20:null) ===START===  146.169.1.7 -- GET
>>> command=updateTemplate&response=json&sessionkey=y3BOUl31eZKpQpYTEtX%2BMjKzHbc%3D&projectid=09da065b-e744-49c4-b8fe-2edb0344d5c3&id=897ab607-6b37-4c11-bab3-da096a8048fd&zoneid=ec3bf9da-f510-49a0-b21d-fb7ecdd5ab67&name=test-prj2&displaytext=test-prj2&ostypeid=7d77166c-1fa2-11e3-809d-38acb5898e2d&passwordenabled=false&_=1385639465477
>>>
>>>     2013-11-28 11:50:59,850 INFO  [cloud.api.ApiServer] (http-8443-20:null)
>>> PermissionDenied: Domain Admin and regular users can modify only their own
>>> Public templates on uuids: []
>>>     ===========
>>>
>>>
>>>     regards,
>>>     Thomas Joseph
>>>
>>>
>>
>> --
>> Fernando Guillén Camba
>> Unidade de Xestión de Infraestruturas TIC
>> Centro de Investigación en Tecnoloxías da Información (CITIUS)
>> Teléfono: 8818 16409
>> Correo: citius.tic@usc.es
>>
>
>


-- 
Fernando Guillén Camba
Unidade de Xestión de Infraestruturas TIC
Centro de Investigación en Tecnoloxías da Información (CITIUS)
Teléfono: 8818 16409
Correo: citius.tic@usc.es


Re: CS 4.1.1 project template issue

Posted by sandeep khandekar <cl...@gmail.com>.
Hi joesph
Yes we cant delete the template, I have created 5 templates I am unable to
delete on CS4.2.0.
So how to delete the whole project?



On Fri, Mar 28, 2014 at 12:44 AM, Daan Hoogland <da...@gmail.com>wrote:

> Fernando,
>
> We don't fix older version for other then security issues and even
> then only in some cases. Companies that sell support do however.
> Citrix being the big example to us all, of course.
>
> regards,
> Daan
>
> On Wed, Mar 26, 2014 at 12:53 PM, Fernando Guillén Camba
> <fe...@usc.es> wrote:
> > I found that this was fixed for 4.2:
> >
> > https://issues.apache.org/jira/browse/CLOUDSTACK-4087
> >
> > Is it going to be fixed in the 4.1 branch or a version upgrade is
> mandatory?
> >
> >
> > El 26/03/14 11:31, Fernando Guillén Camba escribió:
> >
> >> Hi all.
> >>
> >> A user of our Cloudstack has noticed that when creating a template from
> >> inside a project in which he is the administrator he can't delete or
> create
> >> a VM from it. A permission denied error shows up.
> >> The properties of the template show correct domain but an empty account.
> >> ¿Any hints on this?
> >>
> >> It seems that this was already noticed by someone on the list around
> last
> >> december, but no one replied:
> >>
> >>    Hi,
> >>
> >>    I spent a few more days experimenting with the CloudStack, and I
> >> believe there is indeed a problem with permissions and projects. What I
> >> found is that if I create an ISO or a template based on the snapshot in
> my
> >> individual account and make it public, I can the use this ISO or
> template to
> >> create new instances both under my individual account as well as under
> the
> >> project I have created. However, if I create an ISO or a template
> inside the
> >> project, whenever I try to use it I get a similar error message as I
> have
> >> already sent before. Furthermore, after creation, I cannot even edit or
> >> delete such ISO or template, the only way to get rid of them is to
> delete
> >> the entire project. I hope this will help to diagnose the problem. Let
> me
> >> know if you need any further information.
> >>
> >>    Cloudstack version: 4.1.1
> >>
> >>    error:
> >>    ==========
> >>    2013-11-28 11:50:59,845 DEBUG [cloud.api.ApiServlet]
> >> (http-8443-20:null) ===START===  146.169.1.7 -- GET
> >>
> command=updateTemplate&response=json&sessionkey=y3BOUl31eZKpQpYTEtX%2BMjKzHbc%3D&projectid=09da065b-e744-49c4-b8fe-2edb0344d5c3&id=897ab607-6b37-4c11-bab3-da096a8048fd&zoneid=ec3bf9da-f510-49a0-b21d-fb7ecdd5ab67&name=test-prj2&displaytext=test-prj2&ostypeid=7d77166c-1fa2-11e3-809d-38acb5898e2d&passwordenabled=false&_=1385639465477
> >>
> >>    2013-11-28 11:50:59,850 INFO  [cloud.api.ApiServer]
> (http-8443-20:null)
> >> PermissionDenied: Domain Admin and regular users can modify only their
> own
> >> Public templates on uuids: []
> >>    ===========
> >>
> >>
> >>    regards,
> >>    Thomas Joseph
> >>
> >>
> >
> >
> > --
> > Fernando Guillén Camba
> > Unidade de Xestión de Infraestruturas TIC
> > Centro de Investigación en Tecnoloxías da Información (CITIUS)
> > Teléfono: 8818 16409
> > Correo: citius.tic@usc.es
> >
>
>
>
> --
> Daan
>



-- 
SANDEEP KHANDEKAR
Assistant Professor
Department of Computer science and engineering
Sreenidhi Institute of science and Technology
Hyderabad

Re: CS 4.1.1 project template issue

Posted by Daan Hoogland <da...@gmail.com>.
Fernando,

We don't fix older version for other then security issues and even
then only in some cases. Companies that sell support do however.
Citrix being the big example to us all, of course.

regards,
Daan

On Wed, Mar 26, 2014 at 12:53 PM, Fernando Guillén Camba
<fe...@usc.es> wrote:
> I found that this was fixed for 4.2:
>
> https://issues.apache.org/jira/browse/CLOUDSTACK-4087
>
> Is it going to be fixed in the 4.1 branch or a version upgrade is mandatory?
>
>
> El 26/03/14 11:31, Fernando Guillén Camba escribió:
>
>> Hi all.
>>
>> A user of our Cloudstack has noticed that when creating a template from
>> inside a project in which he is the administrator he can't delete or create
>> a VM from it. A permission denied error shows up.
>> The properties of the template show correct domain but an empty account.
>> ¿Any hints on this?
>>
>> It seems that this was already noticed by someone on the list around last
>> december, but no one replied:
>>
>>    Hi,
>>
>>    I spent a few more days experimenting with the CloudStack, and I
>> believe there is indeed a problem with permissions and projects. What I
>> found is that if I create an ISO or a template based on the snapshot in my
>> individual account and make it public, I can the use this ISO or template to
>> create new instances both under my individual account as well as under the
>> project I have created. However, if I create an ISO or a template inside the
>> project, whenever I try to use it I get a similar error message as I have
>> already sent before. Furthermore, after creation, I cannot even edit or
>> delete such ISO or template, the only way to get rid of them is to delete
>> the entire project. I hope this will help to diagnose the problem. Let me
>> know if you need any further information.
>>
>>    Cloudstack version: 4.1.1
>>
>>    error:
>>    ==========
>>    2013-11-28 11:50:59,845 DEBUG [cloud.api.ApiServlet]
>> (http-8443-20:null) ===START===  146.169.1.7 -- GET
>> command=updateTemplate&response=json&sessionkey=y3BOUl31eZKpQpYTEtX%2BMjKzHbc%3D&projectid=09da065b-e744-49c4-b8fe-2edb0344d5c3&id=897ab607-6b37-4c11-bab3-da096a8048fd&zoneid=ec3bf9da-f510-49a0-b21d-fb7ecdd5ab67&name=test-prj2&displaytext=test-prj2&ostypeid=7d77166c-1fa2-11e3-809d-38acb5898e2d&passwordenabled=false&_=1385639465477
>>
>>    2013-11-28 11:50:59,850 INFO  [cloud.api.ApiServer] (http-8443-20:null)
>> PermissionDenied: Domain Admin and regular users can modify only their own
>> Public templates on uuids: []
>>    ===========
>>
>>
>>    regards,
>>    Thomas Joseph
>>
>>
>
>
> --
> Fernando Guillén Camba
> Unidade de Xestión de Infraestruturas TIC
> Centro de Investigación en Tecnoloxías da Información (CITIUS)
> Teléfono: 8818 16409
> Correo: citius.tic@usc.es
>



-- 
Daan

Re: CS 4.1.1 project template issue

Posted by Fernando Guillén Camba <fe...@usc.es>.
I found that this was fixed for 4.2:

https://issues.apache.org/jira/browse/CLOUDSTACK-4087

Is it going to be fixed in the 4.1 branch or a version upgrade is mandatory?


El 26/03/14 11:31, Fernando Guillén Camba escribió:
> Hi all.
>
> A user of our Cloudstack has noticed that when creating a template 
> from inside a project in which he is the administrator he can't delete 
> or create a VM from it. A permission denied error shows up.
> The properties of the template show correct domain but an empty account.
> ¿Any hints on this?
>
> It seems that this was already noticed by someone on the list around 
> last december, but no one replied:
>
>    Hi,
>
>    I spent a few more days experimenting with the CloudStack, and I 
> believe there is indeed a problem with permissions and projects. What 
> I found is that if I create an ISO or a template based on the snapshot 
> in my individual account and make it public, I can the use this ISO or 
> template to create new instances both under my individual account as 
> well as under the project I have created. However, if I create an ISO 
> or a template inside the project, whenever I try to use it I get a 
> similar error message as I have already sent before. Furthermore, 
> after creation, I cannot even edit or delete such ISO or template, the 
> only way to get rid of them is to delete the entire project. I hope 
> this will help to diagnose the problem. Let me know if you need any 
> further information.
>
>    Cloudstack version: 4.1.1
>
>    error:
>    ==========
>    2013-11-28 11:50:59,845 DEBUG [cloud.api.ApiServlet] 
> (http-8443-20:null) ===START===  146.169.1.7 -- GET 
> command=updateTemplate&response=json&sessionkey=y3BOUl31eZKpQpYTEtX%2BMjKzHbc%3D&projectid=09da065b-e744-49c4-b8fe-2edb0344d5c3&id=897ab607-6b37-4c11-bab3-da096a8048fd&zoneid=ec3bf9da-f510-49a0-b21d-fb7ecdd5ab67&name=test-prj2&displaytext=test-prj2&ostypeid=7d77166c-1fa2-11e3-809d-38acb5898e2d&passwordenabled=false&_=1385639465477
>
>    2013-11-28 11:50:59,850 INFO  [cloud.api.ApiServer] 
> (http-8443-20:null) PermissionDenied: Domain Admin and regular users 
> can modify only their own Public templates on uuids: []
>    ===========
>
>
>    regards,
>    Thomas Joseph
>
>


-- 
Fernando Guillén Camba
Unidade de Xestión de Infraestruturas TIC
Centro de Investigación en Tecnoloxías da Información (CITIUS)
Teléfono: 8818 16409
Correo: citius.tic@usc.es