[ https://issues.apache.org/jira/browse/CLOUDSTACK-6501?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sangeetha Hariharan closed CLOUDSTACK-6501. ------------------------------------------- Tested with latest build from 4.4-forward (after IAM revert): As DomainAdmin , when listVirtualMachines is used with listall=true and account and domainId , we are able to list all the Vms owned by the account. Closing this issue. > IAM - DomainAdmin - When listVirtualMachines is used with listall=true and > account and domainId , Vms owned by the account account is not listed. > -------------------------------------------------------------------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-6501 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6501 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: IAM > Affects Versions: 4.4.0 > Environment: Build from 4.4 > Reporter: Sangeetha Hariharan > Assignee: Min Chen > Priority: Critical > Fix For: 4.4.0 > > > IAM - DomainAdmin - When listVirtualMachines is used with listall=true and > account and domainId , Vms owned by the account is not listed. > Steps to reproduce the problem: > Set up: > Pre Reqs: > Admin - Creates object > Domain Admin for d1 - D1 - Creates object - d1 > Domain Admin for d1 - D1/D11 > User account for d1 - D1/D111 - Creates object - d111a > Domain Admin for d1 - D1/D12 > Domain Admin for d2 - D2 - Creates object -d2 > User Account in domain D1 - userD1-1 - Creates object -d1a > User Account in domain D1 - userD1-2 - Creates object - d1b > Domain Account in domain D1/D11 - D11 - Creates object - d11 > User Account in domain D1/D11 - userD1-a - Creates object - d11a > User Account in domain D1/D11 - userD1-a - Creates object - d11b > User Account in domain D1/D12- userD1-b - Creates object - d12a > User Account in domain D1/D12 - userD-a - Creates object - d12b > As domain admin account D1 , try to list all the Vms for d11 (domain admin > user) using account and domainId parameters. > Expected Result: > Vm owned by the account that is passed in account/domainId parameter. > Actual Result: > Empty set is returned. > GET > http://10.223.49.6/client/api?command=listVirtualMachines&domainId=0e8d9d60-c39a-4304-b048-1e63500d0d30&account=testD11&listAll=true&isrecursive=true&apiKey=bW1FEJkIERji0cWRNQqvmWOgOINjMeBggyoPsMjN9_Qnvq-QtC6L4ORqmbdfQ-XtUYQdSoJIniZrHK3_oi9pcQ&signature=5qLgaWzslWKSz%2FXbVSK0zdj%2B49I%3D > \n\n > current Time: Thu Apr 24 14:43:18 PDT 2014 > <?xml version="1.0" encoding="UTF-8"?><listvirtualmachinesresponse > cloud-stack-version="4.4.0-SNAPSHOT"></listvirtualmachinesresponse>Connection > to 10.223.49.6 8080 port [tcp/webcache] succeeded! > Response Time(in secs) : 0 current Time: Thu Apr 24 14:43:18 PDT 2014 -- This message was sent by Atlassian JIRA (v6.2#6252)