You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2013/06/25 00:36:20 UTC
[jira] [Commented] (CLOUDSTACK-3169) [EIP/ELB] [Projects]
associateIpAddress fails when executed by non-ROOT admin account from
projects view
[ https://issues.apache.org/jira/browse/CLOUDSTACK-3169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13692482#comment-13692482 ]
ASF subversion and git services commented on CLOUDSTACK-3169:
-------------------------------------------------------------
Commit 8b2aae0bfecde3db7e804a328fc99b136513bee7 in branch refs/heads/master from [~alena1108]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=8b2aae0 ]
CLOUDSTACK-3169: ipAssoc - set account id of the ip to the project account. Used to be set to the network owner which is System in Shared network case, and the further verification used to fail because of that
> [EIP/ELB] [Projects] associateIpAddress fails when executed by non-ROOT admin account from projects view
> --------------------------------------------------------------------------------------------------------
>
> Key: CLOUDSTACK-3169
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3169
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the default.)
> Affects Versions: 4.2.0
> Reporter: Alena Prokharchyk
> Assignee: Alena Prokharchyk
> Fix For: 4.2.0
>
>
> Steps to reproduce :
> 1. Have at least 1 EIP/ELB enabled zone using the latest 3.0.x code.
> 2. Create a project
> 3. Have at least one non-ROOT domain admin as owner of the above project.
> 4. Execute associate IpAddress API to associate an EIP address
> Observations:
> (i) It fails with the following error
> 2013-06-17 23:01:49,369 DEBUG [cloud.api.ApiServer] (catalina-exec-9:null) (userId=3 accountId=3 sessionId=null) 10.252.112.227 -- GET apiKey=m8y-aWlT5lopDACScCb022A_v0dnRM6-fmYOdqFLDdIzJhyoYY_I1TVauT2wL9fWBpQHMnhLCVF2UdMJ9dbBNQ&command=associateIpAddress&networkid=86ed62de-6250-47c6-b9b3-45dbbc1d7ad1&projectid=ac67765c-e9b0-417a-81e4-0dff71ce00c6&response=json&zoneid=c9c8792b-8bc6-4b60-b32e-6ca7dfb43ff3&signature=2sKP4oCfm87ka6DBrVUmeZQryjk%3D 531 Acct[3-dom1Acc1] does not have permission to operate with resource Acct[1-system]
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira