rajujith opened a new issue, #7391:
URL: https://github.com/apache/cloudstack/issues/7391

   <!--
   
   -->
   
   ##### ISSUE TYPE
   <!-- Pick one below and delete the rest -->
    
    * Improvement Request
   
   
   ##### COMPONENT NAME
   <!--
   
   -->
   ~~~
   Component: API 
   ~~~
   
   ##### CLOUDSTACK VERSION
   <!--
   
   -->
   
   ~~~
   4.17.2.0
   ~~~
   
   
   
   ##### SUMMARY
   <!-- Explain the problem/feature briefly -->
   
   Currently, a parent domain admin can perform most of the operations in a 
subdomain such as Add/delete FW,PF rules, stop, start & destroy virtual 
machines but deploying a virtual machine is not allowed. This design is 
inconsistent and needs to be improved to allow VM deployment to subdomain 
networks. 
   
   ##### STEPS TO REPRODUCE
   <!--
   
   Deploy Virtual Machine using API as a parent domain admin to a subdomain 
guest network. 
   Deployment fails with 'permission denied' 
   
   For new features, show how the feature would be used.
   -->
   
   Deploy Virtual Machine using API as a parent domain admin to a subdomain 
guest network. 
   Deployment fails with 'permission denied' 
   
   Try destroying a VM in a subdomain as a parent domain admin, this works. 
These two are contradicting designs. 
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to