[ https://issues.apache.org/jira/browse/CLOUDSTACK-3242?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13697983#comment-13697983 ]
ASF subversion and git services commented on CLOUDSTACK-3242: ------------------------------------------------------------- Commit a173130de0e901d06c08bdee9a1effcc7c5dd053 in branch refs/heads/master-6-17-stable from [~alena1108] [ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=a173130 ] CLOUDSTACK-3242: fixed updateTemplate and updateTemplate permissions security checks for project based templates > updateTemplate and updatetemplatePermissions API fails with project id param > ---------------------------------------------------------------------------- > > Key: CLOUDSTACK-3242 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-3242 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Projects > Affects Versions: 4.2.0 > Environment: build: > CloudPlatform-4.2-117-rhel6.3 > Reporter: shweta agarwal > Assignee: Alena Prokharchyk > Priority: Critical > Fix For: 4.2.0 > > > Repro steps: > Create a domain > create a user in that domain > create a project in that domain as a domain user > create a template in the project > Try to update the template > Bug: > Getting error message: Acct[11-childuser2] does not have permission to launch > instances from Tmpl[230-VHD-230-16-9833006b-2d03-31f5-a540-54a30b147d77 > API : > http://10.147.38.141:8080/client/api?command=updateTemplate&response=json&sessionkey=L8zjkn82T3ZZ0Px2xZrcyDdB9HM%3D&projectid=02aea84a-8e2a-4412-92ba-1bcd43e91f60&id=67dacd94-58f4-4ce5-8646-842eb56259aa&zoneid=0d3e68a9-4f66-4077-a934-6a07b7bde4d1&name=centos56-x86111&displaytext=centos56-x86&ostypeid=9ea4f72c-d98f-11e2-95e7-0682fe000017&passwordenabled=false&_=1372336716097 > Response: > { "updatetemplateresponse" : > {"uuidList":[],"errorcode":531,"cserrorcode":4365,"errortext":"Acct[11-childuser2] > does not have permission to launch instances from > Tmpl[230-VHD-230-16-9833006b-2d03-31f5-a540-54a30b147d77"} } > API: > http://10.147.38.141:8080/client/api?command=updateTemplatePermissions&response=json&sessionkey=L8zjkn82T3ZZ0Px2xZrcyDdB9HM%3D&projectid=02aea84a-8e2a-4412-92ba-1bcd43e91f60&id=67dacd94-58f4-4ce5-8646-842eb56259aa&zoneid=0d3e68a9-4f66-4077-a934-6a07b7bde4d1&ispublic=false&_=1372336719162 > Response: > { "updatetemplatepermissionsresponse" : > {"uuidList":[],"errorcode":531,"cserrorcode":4365,"errortext":"Acct[11-childuser2] > does not have permission to launch instances from > Tmpl[230-VHD-230-16-9833006b-2d03-31f5-a540-54a30b147d77"} } -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira