weizhouapache commented on issue #3894: api: Fix count and item issues returned by list APIs URL: https://github.com/apache/cloudstack/pull/3894#issuecomment-590279113 tested with the following setting (1) login as root admin, create a network/vm (2) login as domain admin of domain test1, create a network/vm. (3) login as domain admin of domain test1, create a project, create a network/vm in project (4) login as user1 in test1, create a network/vm. (5) login as user1 in test1, create a project, create a network/vm in project verified following apis (1) list virtualmachines (2) list volumes (3) list nics (5) list publicipaddresses (6) list networks (7) list routers results (1) root admin is able to list resources in projects of sub-domains, with projectid=-1 (but listall=false, @rhtyd is this expected result ? ) if listall =true and projectid=-1, it returns resources in projects and non-projects. seems good. (2) list networks as root admin, projectid=-1/listall=false, return nothing (need to be fixed) projectid=-1/listall=true, return isolated networks in projects, and shared network for projects listall=true, return networks not in/for projects. (3) list routers as domain admin, projectid=-1, returns routers of isolated networks in projects. should it be allowed ? (4) list resource as domain admin projectid=-1, returns vms/volumes in projects listall=true, returns vms/volumes in non-projects listall =true and projectid=-1, it returns vms/volumes in projects (vms in non-projects are not returned. @rhtyd it this expected result ? ) (5) list networks as domain admin listall=true/false, returns all isolated/shared networks this domain admin can access. projectid=-1, returns all isolated/shared networks a project in the domain can access. projectid=-1 and listall=true, same as above (projectid=-1). (6) list resources as normal user (same as domain admin) projectid=-1, returns vms/volumes in projects listall=true, returns vms/volumes in non-projects listall =true and projectid=-1, it returns vms/volumes in projects (vms in non-projects are not returned. @rhtyd it this expected result ? ) (7) list networks as normal user (same as domain admin) listall=true/false, returns all isolated/shared networks this user can access. projectid=-1, returns all isolated/shared networks a project this user manages can access. projectid=-1 and listall=true, same as above (projectid=-1).
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services
