[jira] [Assigned] (CLOUDSTACK-7283) Allow regular user to execute listUsers API call

2014-12-01 Thread Radhika Nair (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-7283?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Radhika Nair reassigned CLOUDSTACK-7283:


Assignee: (was: Radhika Nair)

 Allow regular user to execute listUsers API call
 

 Key: CLOUDSTACK-7283
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7283
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Doc
Affects Versions: 4.5.0
Reporter: Alena Prokharchyk
 Fix For: 4.5.0


 Since normal-user role can have access to listAccounts API that returns user 
 info + he can update users info by calling updateUser, he should have an 
 access to listUsers API. The response should return his user info only. Other 
 users belonging to the same user's account, shouldn't be returned.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Assigned] (CLOUDSTACK-7283) Allow regular user to execute listUsers API call

2014-11-19 Thread Radhika Nair (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-7283?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Radhika Nair reassigned CLOUDSTACK-7283:


Assignee: (was: Radhika Nair)

 Allow regular user to execute listUsers API call
 

 Key: CLOUDSTACK-7283
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7283
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Doc
Affects Versions: 4.5.0
Reporter: Alena Prokharchyk
 Fix For: 4.5.0


 Since normal-user role can have access to listAccounts API that returns user 
 info + he can update users info by calling updateUser, he should have an 
 access to listUsers API. The response should return his user info only. Other 
 users belonging to the same user's account, shouldn't be returned.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Assigned] (CLOUDSTACK-7283) Allow regular user to execute listUsers API call

2014-08-07 Thread Alena Prokharchyk (JIRA)

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-7283?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Alena Prokharchyk reassigned CLOUDSTACK-7283:
-

Assignee: Radhika Nair  (was: Alena Prokharchyk)

Radhika, assigning the bug to you. I've just changed the permissions for 
listUsers API to allow regular users execute the call. Not sure if the API doc 
builder reflects permission changes; if not, you need to change the online doc 
by adding the command into users section.

 Allow regular user to execute listUsers API call
 

 Key: CLOUDSTACK-7283
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7283
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: API, Doc
Affects Versions: 4.5.0
Reporter: Alena Prokharchyk
Assignee: Radhika Nair
 Fix For: 4.5.0


 Since normal-user role can have access to listAccounts API that returns user 
 info + he can update users info by calling updateUser, he should have an 
 access to listUsers API. The response should return his account info only.



--
This message was sent by Atlassian JIRA
(v6.2#6252)