[ https://issues.apache.org/jira/browse/CLOUDSTACK-9679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15955821#comment-15955821 ]
ASF GitHub Bot commented on CLOUDSTACK-9679: -------------------------------------------- Github user pdion891 commented on the issue: https://github.com/apache/cloudstack/pull/1834 @pdumbre @karuturi @syed I thinks this introduce an issue where a domain admin cannot get a template by id. a domain admin can list feature template and get a template via `ids=` but not with `id=` The example bellow is perform with a domain admin account to list public+featured template at root domain: ``` (beta2r1-ninja) > list templates templatefilter=featured filter=name,id count = 9 template: +--------------------------------------+---------------------------------+ | id | name | +--------------------------------------+---------------------------------+ | 513b3a6d-c011-46f0-a4a3-2a954cadb673 | CoreOS Alpha 1367.5.0 | | 0c04d876-1f85-45a7-b6f4-504de435bf12 | Debian 8.5 PV base (64bit) | | 285f2203-449a-428f-997a-1ffbebbf1382 | CoreOS Alpha | | 332b6ca8-b3d6-42c7-83e5-60fe87be6576 | CoreOS Stable | | 3b705008-c186-464d-ad59-312d902420af | Windows Server 2016 std SPLA | | 4256aebe-a1c1-4b49-9993-de2bc712d521 | Ubuntu 16.04.01 HVM | | 59e6b00a-b88e-4539-aa3c-75c9c7e9fa6c | Ubuntu 14.04.5 HVM base (64bit) | | 3ab936eb-d8c2-44d8-a64b-17ad5adf8a51 | CentOS 6.8 PV | | 7de5d423-c91e-49cc-86e8-9d6ed6abd997 | CentOS 7.2 HVM | +--------------------------------------+---------------------------------+ (beta2r1-ninja) > list templates templatefilter=featured id=7de5d423-c91e-49cc-86e8-9d6ed6abd997 filter=name,id Error 531: Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not have permission to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9 cserrorcode = 4365 errorcode = 531 errortext = Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not have permission to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9 uuidList: (beta2r1-ninja) > list templates templatefilter=featured ids=7de5d423-c91e-49cc-86e8-9d6ed6abd997 filter=name,id count = 1 template: +--------------------------------------+----------------+ | id | name | +--------------------------------------+----------------+ | 7de5d423-c91e-49cc-86e8-9d6ed6abd997 | CentOS 7.2 HVM | +--------------------------------------+----------------+ ``` > Allow master user to manage subordinate user uploaded template > -------------------------------------------------------------- > > Key: CLOUDSTACK-9679 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9679 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Reporter: pallavi Dumbre > > REPRO STEPS > ================== > 1. Create Master User Aaron > 2. Create common user feixiang within tenant Aaron > 3. Login as feixiang, upload template CentOS56 > 4. Login as Aaron, go to Template view ,unable to see feixiang's template > CentOS56 > EXPECTED BEHAVIOR > ================== > Login as master user can view all subordinate user's template > > ACTUAL BEHAVIOR > ================== > Only master user itself upload template to manageable > -- This message was sent by Atlassian JIRA (v6.3.15#6346)