[
https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated CLOUDSTACK-10434:
-------------------------------
Description:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
in below table. Anyone chould change this table. If you think the APIs do not
need access check, change its lable as "no".
||API||Lack?||
|updateVolume|yes|
|detachVolumeViaDestroyVM|yes|
was:
I think some APIs in VolumeApiServiceImpl lack access check. I will list them
in below table. Anyone chould change this table. If you think the APIs do not
need access check, change its lable to no.
||API||Lack?||
|updateVolume|yes|
|detachVolumeViaDestroyVM|yes|
> some APIs in VolumeApiServiceImpl need access check
> ---------------------------------------------------
>
> Key: CLOUDSTACK-10434
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434
> Project: CloudStack
> Issue Type: New Feature
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Reporter: lujie
> Priority: Major
>
> I think some APIs in VolumeApiServiceImpl lack access check. I will list
> them in below table. Anyone chould change this table. If you think the APIs
> do not need access check, change its lable as "no".
> ||API||Lack?||
> |updateVolume|yes|
> |detachVolumeViaDestroyVM|yes|
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
