[
https://issues.apache.org/jira/browse/CLOUDSTACK-9679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15955821#comment-15955821
]
ASF GitHub Bot commented on CLOUDSTACK-9679:
--------------------------------------------
Github user pdion891 commented on the issue:
https://github.com/apache/cloudstack/pull/1834
@pdumbre @karuturi @syed
I thinks this introduce an issue where a domain admin cannot get a template
by id.
a domain admin can list feature template and get a template via `ids=` but
not with `id=`
The example bellow is perform with a domain admin account to list
public+featured template at root domain:
```
(beta2r1-ninja) > list templates templatefilter=featured filter=name,id
count = 9
template:
+--------------------------------------+---------------------------------+
| id | name |
+--------------------------------------+---------------------------------+
| 513b3a6d-c011-46f0-a4a3-2a954cadb673 | CoreOS Alpha 1367.5.0 |
| 0c04d876-1f85-45a7-b6f4-504de435bf12 | Debian 8.5 PV base (64bit) |
| 285f2203-449a-428f-997a-1ffbebbf1382 | CoreOS Alpha |
| 332b6ca8-b3d6-42c7-83e5-60fe87be6576 | CoreOS Stable |
| 3b705008-c186-464d-ad59-312d902420af | Windows Server 2016 std SPLA |
| 4256aebe-a1c1-4b49-9993-de2bc712d521 | Ubuntu 16.04.01 HVM |
| 59e6b00a-b88e-4539-aa3c-75c9c7e9fa6c | Ubuntu 14.04.5 HVM base (64bit) |
| 3ab936eb-d8c2-44d8-a64b-17ad5adf8a51 | CentOS 6.8 PV |
| 7de5d423-c91e-49cc-86e8-9d6ed6abd997 | CentOS 7.2 HVM |
+--------------------------------------+---------------------------------+
(beta2r1-ninja) > list templates templatefilter=featured
id=7de5d423-c91e-49cc-86e8-9d6ed6abd997 filter=name,id
Error 531: Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not
have permission to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9
cserrorcode = 4365
errorcode = 531
errortext = Acct[b285d62e-0ec2-4a7c-b773-961595ec6356-Ninja-5664] does not
have permission to operate within domain id=c9b4f83d-16eb-11e7-a8b9-367e6fe958a9
uuidList:
(beta2r1-ninja) > list templates templatefilter=featured
ids=7de5d423-c91e-49cc-86e8-9d6ed6abd997 filter=name,id
count = 1
template:
+--------------------------------------+----------------+
| id | name |
+--------------------------------------+----------------+
| 7de5d423-c91e-49cc-86e8-9d6ed6abd997 | CentOS 7.2 HVM |
+--------------------------------------+----------------+
```
> Allow master user to manage subordinate user uploaded template
> --------------------------------------------------------------
>
> Key: CLOUDSTACK-9679
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-9679
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Reporter: pallavi Dumbre
>
> REPRO STEPS
> ==================
> 1. Create Master User Aaron
> 2. Create common user feixiang within tenant Aaron
> 3. Login as feixiang, upload template CentOS56
> 4. Login as Aaron, go to Template view ,unable to see feixiang's template
> CentOS56
> EXPECTED BEHAVIOR
> ==================
> Login as master user can view all subordinate user's template
>
> ACTUAL BEHAVIOR
> ==================
> Only master user itself upload template to manageable
>
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
