Alena Prokharchyk created CLOUDSTACK-3169:
---------------------------------------------
Summary: [EIP/ELB] [Projects] associateIpAddress fails when
executed by non-ROOT admin account from projects view
Key: CLOUDSTACK-3169
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3169
Project: CloudStack
Issue Type: Bug
Security Level: Public (Anyone can view this level - this is the default.)
Affects Versions: 4.2.0
Reporter: Alena Prokharchyk
Assignee: Alena Prokharchyk
Fix For: 4.2.0
Steps to reproduce :
1. Have at least 1 EIP/ELB enabled zone using the latest 3.0.x code.
2. Create a project
3. Have at least one non-ROOT domain admin as owner of the above project.
4. Execute associate IpAddress API to associate an EIP address
Observations:
(i) It fails with the following error
2013-06-17 23:01:49,369 DEBUG [cloud.api.ApiServer] (catalina-exec-9:null)
(userId=3 accountId=3 sessionId=null) 10.252.112.227 -- GET
apiKey=m8y-aWlT5lopDACScCb022A_v0dnRM6-fmYOdqFLDdIzJhyoYY_I1TVauT2wL9fWBpQHMnhLCVF2UdMJ9dbBNQ&command=associateIpAddress&networkid=86ed62de-6250-47c6-b9b3-45dbbc1d7ad1&projectid=ac67765c-e9b0-417a-81e4-0dff71ce00c6&response=json&zoneid=c9c8792b-8bc6-4b60-b32e-6ca7dfb43ff3&signature=2sKP4oCfm87ka6DBrVUmeZQryjk%3D
531 Acct[3-dom1Acc1] does not have permission to operate with resource
Acct[1-system]
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
