[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Issue Type: Bug (was: New Feature) > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > I think some APIs in VolumeApiServiceImpl lack access check. I will list > them in below table. Anyone chould change this table. If you think the APIs > do not need access check, change its lable as "no". > ||API||Lack?|| > |updateVolume|yes| > |detachVolumeViaDestroyVM|yes| > |takeSnapshot|yes| > |migrateVolume|yes| -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Priority: Blocker (was: Major) > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Blocker > > I think some APIs in VolumeApiServiceImpl lack access check. I will list > them in below table. Anyone chould change this table. If you think the APIs > do not need access check, change its lable as "no". > ||API||Lack?|| > |updateVolume|yes| > |detachVolumeViaDestroyVM|yes| > |takeSnapshot|yes| > |migrateVolume|yes| -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Description: I think some APIs in VolumeApiServiceImpl lack access check. I will list them in below table. Anyone chould change this table. If you think the APIs do not need access check, change its lable as "no". ||API||Lack?|| |updateVolume|yes| |detachVolumeViaDestroyVM|yes| |takeSnapshot|yes| |migrateVolume|yes| was: I think some APIs in VolumeApiServiceImpl lack access check. I will list them in below table. Anyone chould change this table. If you think the APIs do not need access check, change its lable as "no". ||API||Lack?|| |updateVolume|yes| |detachVolumeViaDestroyVM|yes| |takeSnapshot|yes| > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > I think some APIs in VolumeApiServiceImpl lack access check. I will list > them in below table. Anyone chould change this table. If you think the APIs > do not need access check, change its lable as "no". > ||API||Lack?|| > |updateVolume|yes| > |detachVolumeViaDestroyVM|yes| > |takeSnapshot|yes| > |migrateVolume|yes| -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Description: I think some APIs in VolumeApiServiceImpl lack access check. I will list them in below table. Anyone chould change this table. If you think the APIs do not need access check, change its lable as "no". ||API||Lack?|| |updateVolume|yes| |detachVolumeViaDestroyVM|yes| was: I think some APIs in VolumeApiServiceImpl lack access check. I will list them in below table. Anyone chould change this table. If you think the APIs do not need access check, change its lable to no. ||API||Lack?|| |updateVolume|yes| |detachVolumeViaDestroyVM|yes| > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > I think some APIs in VolumeApiServiceImpl lack access check. I will list > them in below table. Anyone chould change this table. If you think the APIs > do not need access check, change its lable as "no". > ||API||Lack?|| > |updateVolume|yes| > |detachVolumeViaDestroyVM|yes| -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Description: I think some APIs in VolumeApiServiceImpl lack access check. I will list them in below table. Anyone chould change this table. If you think the APIs do not need access check, change its lable to no. ||API||Lack?|| |updateVolume|yes| |detachVolumeViaDestroyVM|yes| was: it seems that some APIs in VolumeApiServiceImpl lack access check. list here ||Heading 2|| |Col A2| > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > I think some APIs in VolumeApiServiceImpl lack access check. I will list > them in below table. Anyone chould change this table. If you think the APIs > do not need access check, change its lable to no. > ||API||Lack?|| > |updateVolume|yes| > |detachVolumeViaDestroyVM|yes| -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Description: it seems that some APIs in VolumeApiServiceImpl lack access check. list here ||Heading 2|| |Col A2| was:it seems that some API in lack access check > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > it seems that some APIs in VolumeApiServiceImpl lack access check. > list here > > ||Heading 2|| > |Col A2| > -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Description: it seems that some API in lack access check (was: it seems that updateVolume lack access check) > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > it seems that some API in lack access check -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Updated] (CLOUDSTACK-10434) some APIs in VolumeApiServiceImpl need access check
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated CLOUDSTACK-10434: --- Summary: some APIs in VolumeApiServiceImpl need access check (was: updateVolume should have access check) > some APIs in VolumeApiServiceImpl need access check > --- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the > default.) >Reporter: lujie >Priority: Major > > it seems that updateVolume lack access check -- This message was sent by Atlassian Jira (v8.3.4#803005)
