[ https://issues.apache.org/jira/browse/CLOUDSTACK-6513?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13981804#comment-13981804 ]
ASF subversion and git services commented on CLOUDSTACK-6513: ------------------------------------------------------------- Commit a4cb8d11462cb404eba067541639d46e509d717b in cloudstack's branch refs/heads/4.4-forward from [~minchen07] [ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=a4cb8d1 ] CLOUDSTACK-6513: IAM - Templates - When templates are listed with templatefilter="shared" is used , we see public templates also being included in the list. This commit reverts listTemplates behavior to 4.3 old logic without using consistent interpretation of list parameters adopted in new IAM model. > IAM - Templates - When templates are listed with templatefilter="shared" is > used , we see public templates also being included in the list. > ------------------------------------------------------------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-6513 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6513 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: IAM > Affects Versions: 4.4.0 > Environment: Build from 4.4 > Reporter: Sangeetha Hariharan > Assignee: Min Chen > Priority: Critical > Fix For: 4.4.0 > > > IAM - Templates - When templates are listed with templatefilter="shared" is > used , we see public templates also being included in the list. > Steps to reproduce the problem: > As user1 , Create a private template and a public template. > Grant access to the private template for user2 using > updateTemplatePermissions. > As user2 , list templates with templatefilter="shared". This returns both > public and the the shared template. > GET > http://10.223.49.6/client/api?command=listTemplates&pagesize=100&page=1&listAll=true&templatefilter=shared&apiKey=SrgUY-U-nUl4qsOyn409kCjA2jC7dR5ReIV9SjdnmzLOn3c0Fm-vZbDSpkldUjuqLAXt5ShodtXYOgRB5NCnJQ&signature=WBO8ll9nyjiB29aVq%2FpUsEQrthM%3D > \n\n > <?xml version="1.0" encoding="UTF-8"?><listtemplatesresponse > cloud-stack-version="4.4.0-SNAPSHOT"><count>6</count><template><id>a2065bcc-7139-46b0-ac15-db7d3ff7dd75</id><name>Public_featured_d1a-TP7TPK</name><displaytext>public > and feature > Template</displaytext><ispublic>true</ispublic><created>2014-04-21T13:50:35-0400</created><isready>true</isready><passwordenabled>false</passwordenabled><format>VHD</format><isfeatured>true</isfeatured><crossZones>false</crossZones><ostypeid>e5ebce64-c019-11e3-907f-4adf980f9414</ostypeid><ostypename>CentOS > 5.3 > (64-bit)</ostypename><account>testtemplateD1A</account><zoneid>75d61334-ff70-49c3-99ed-3af702cd51d7</zoneid><zonename>BLR1</zonename><size>5242880</size><templatetype>USER</templatetype><hypervisor>Simulator</hypervisor><domain>D1</domain><domainid>691ab662-6793-42a0-96e6-3b31a2c4e52d</domainid><isextractable>true</isextractable><sshkeyenabled>false</sshkeyenabled><isdynamicallyscalable>false</isdynamicallyscalable></template><template><id>ce1635dc-1fcb-4f60-8d2f-d1129a3771ce</id><name>Public_not_featured_d2a-NPYFSN</name><displaytext>public > and not feature > Template</displaytext><ispublic>true</ispublic><created>2014-04-21T13:50:36-0400</created><isready>true</isready><passwordenabled>false</passwordenabled><format>VHD</format><isfeatured>false</isfeatured><crossZones>false</crossZones><ostypeid>e5ebce64-c019-11e3-907f-4adf980f9414</ostypeid><ostypename>CentOS > 5.3 > (64-bit)</ostypename><account>testtemplateD2</account><zoneid>75d61334-ff70-49c3-99ed-3af702cd51d7</zoneid><zonename>BLR1</zonename><size>5242880</size><templatetype>USER</templatetype><hypervisor>Simulator</hypervisor><domain>D2</domain><domainid>18222e53-7221-4d6f-9a76-8f59869f24b2</domainid><isextractable>true</isextractable><sshkeyenabled>false</sshkeyenabled><isdynamicallyscalable>false</isdynamicallyscalable></template><template><id>223e0c09-e18e-4188-9d8e-7ff2e2305547</id><name>Private_featured_d1-E9PQHO</name><displaytext>private > and featured > Template</displaytext><ispublic>false</ispublic><created>2014-04-21T13:50:36-0400</created><isready>true</isready><passwordenabled>false</passwordenabled><format>VHD</format><isfeatured>true</isfeatured><crossZones>false</crossZones><ostypeid>e5ebce64-c019-11e3-907f-4adf980f9414</ostypeid><ostypename>CentOS > 5.3 > (64-bit)</ostypename><account>testtemplateD1A</account><zoneid>75d61334-ff70-49c3-99ed-3af702cd51d7</zoneid><zonename>BLR1</zonename><size>5242880</size><templatetype>USER</templatetype><hypervisor>Simulator</hypervisor><domain>D1</domain><domainid>691ab662-6793-42a0-96e6-3b31a2c4e52d</domainid><isextractable>true</isextractable><sshkeyenabled>false</sshkeyenabled><isdynamicallyscalable>false</isdynamicallyscalable></template><template><id>a7b69a5e-4cb3-45fa-b3e7-dab3a6b73e45</id><name>Public_not_featured_d1a-XOCR05</name><displaytext>public > and not feature > Template</displaytext><ispublic>true</ispublic><created>2014-04-21T13:50:35-0400</created><isready>true</isready><passwordenabled>false</passwordenabled><format>VHD</format><isfeatured>false</isfeatured><crossZones>false</crossZones><ostypeid>e5ebce64-c019-11e3-907f-4adf980f9414</ostypeid><ostypename>CentOS > 5.3 > (64-bit)</ostypename><account>testtemplateD1A</account><zoneid>75d61334-ff70-49c3-99ed-3af702cd51d7</zoneid><zonename>BLR1</zonename><size>5242880</size><templatetype>USER</templatetype><hypervisor>Simulator</hypervisor><domain>D1</domain><domainid>691ab662-6793-42a0-96e6-3b31a2c4e52d</domainid><isextractable>true</isextractable><sshkeyenabled>false</sshkeyenabled><isdynamicallyscalable>false</isdynamicallyscalable></template><template><id>e65cdfa0-c019-11e3-907f-4adf980f9414</id><name>CentOS > 5.3(64-bit) no GUI (Simulator)</name><displaytext>CentOS 5.3(64-bit) no GUI > (Simulator)</displaytext><ispublic>true</ispublic><created>2014-04-09T15:15:54-0400</created><isready>true</isready><passwordenabled>false</passwordenabled><format>VHD</format><isfeatured>true</isfeatured><crossZones>true</crossZones><ostypeid>e5eba5c4-c019-11e3-907f-4adf980f9414</ostypeid><ostypename>CentOS > 5.3 > (32-bit)</ostypename><account>system</account><zoneid>75d61334-ff70-49c3-99ed-3af702cd51d7</zoneid><zonename>BLR1</zonename><size>2147483648</size><templatetype>BUILTIN</templatetype><hypervisor>Simulator</hypervisor><domain>ROOT</domain><domainid>e5e2ad7a-c019-11e3-907f-4adf980f9414</domainid><isextractable>false</isextractable><checksum></checksum><sshkeyenabled>false</sshkeyenabled><isdynamicallyscalable>false</isdynamicallyscalable></template><template><id>23112683-9725-4edf-8f4f-89e41455b515</id><name>Public_featured_d2a-RGVLAA</name><displaytext>public > and feature > Template</displaytext><ispublic>true</ispublic><created>2014-04-21T13:50:36-0400</created><isready>true</isready><passwordenabled>false</passwordenabled><format>VHD</format><isfeatured>true</isfeatured><crossZones>false</crossZones><ostype > id>e5ebce64-c019-11e3-907f-4adf980f9414</ostypeid><ostypename>CentOS 5.3 > (64-bit)</ostypename><account>testtemplateD2</acc > ount><zoneid>75d61334-ff70-49c3-99ed-3af702cd51d7</zoneid><zonename>BLR1</zonename><size>5242880</size><templatetype>USER< > /templatetype><hypervisor>Simulator</hypervisor><domain>D2</domain><domainid>18222e53-7221-4d6f-9a76-8f59869f24b2</domaini > d><isextractable>true</isextractable><sshkeyenabled>false</sshkeyenabled><isdynamicallyscalable>false</isdynamicallyscalab > le></template></listtemplatesresponse>Connection to 10.223.49.6 8080 port > [tcp/webcache] succeeded! > Expected Behavior: > We expect only the shared templates to be listed in this case. -- This message was sent by Atlassian JIRA (v6.2#6252)