[jira] [Updated] (CLOUDSTACK-6381) IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with out passing isrecursive falg) , all Vms from the subdomain are also listed.

2014-04-21 Thread Abhinandan Prateek (JIRA) 

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-6381?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Abhinandan Prateek updated CLOUDSTACK-6381:
---

Assignee: Min Chen

 IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with 
 out passing isrecursive falg) , all Vms from the subdomain are also listed.
 

 Key: CLOUDSTACK-6381
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6381
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: IAM
Affects Versions: 4.4.0
 Environment: Build from 4.4.
Reporter: Sangeetha Hariharan
Assignee: Min Chen
Priority: Critical
 Fix For: 4.4.0


 IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with 
 out passing isrecursive falg) , all Vms from the subdomain are also listed.
 Set up:
 Pre Reqs:
 Admin - Creates object
 Domain Admin  for d1 - D1  - Creates object - d1
 Domain Admin  for d1 - D1/D11
 User account  for d1 - D1/D111 - Creates object - d111a
 Domain Admin  for d1 - D1/D12
 Domain Admin  for d2 - D2 - Creates object -d2
 User Account in domain D1 - userD1-1 - Creates object -d1a 
 User Account in domain D1 - userD1-2 - Creates object - d1b
 User Account in domain D1/D11 - userD1-a - Creates object - d11a
 User Account in domain D1/D11 - userD1-a - Creates object - d11b
 User Account in domain D1/D12- userD1-b - Creates object - d12a
 User Account in domain D1/D12 - userD-a - Creates object - d12b
 As domain admin - D1 , i tried to listVistualMachines passing listAll=true 
 parameter (no isrecurssive parameter). 
 Expected result:
 only all the Vms that belong to this domain should be listed , which should 
 be 3 Vms , d1,d1a and d1b.
 But I see 8 Vms being returned , which also includes the Vms in the domain, 
 d12 and d111.
 GET 
 http://10.223.49.6/client/api?command=listVirtualMachineslistAll=trueapiKey=Hv0VKnmBjXhyRMKZ7ixI51gG-iqHqRVTp1xCCLU2-gTnZwhuUNWsa4zZLYZWWLD5lEhvwe05tJKJVa9NeS5REwsignature=cDqQMD6qlKeiz2g40pSOYqJKqoE%3D
  \n\n
 ?xml version=1.0 encoding=UTF-8?listvirtualmachinesresponse 
 cloud-stack-version=4.4.0-SNAPSHOTcount8/countvirtualmachineid22193996-12f9-46ff-91cd-3d409f7f8c60/idnamed11a/namedisplaynamed11a/displaynameaccounttestD11A-TestVMList-3385RP/accountdomainid0a0f7c09-2f1a-4939-94ce-88388e197949/domainiddomainD11-UFBXGQ/domaincreated2014-04-10T09:01:37-0400/createdstateRunning/statehaenablefalse/haenablezoneid75d61334-ff70-49c3-99ed-3af702cd51d7/zoneidzonenameBLR1/zonenametemplateide65cdfa0-c019-11e3-907f-4adf980f9414/templateidtemplatenameCentOS
  5.3(64-bit) no GUI (Simulator)/templatenametemplatedisplaytextCentOS 
 5.3(64-bit) no GUI 
 (Simulator)/templatedisplaytextpasswordenabledfalse/passwordenabledserviceofferingid49dee9f8-a49a-414d-b8b2-b0d59b5981f0/serviceofferingidserviceofferingnameSmall
  
 Instance/serviceofferingnamecpunumber1/cpunumbercpuspeed100/cpuspeedmemory128/memorycpuused10%/cpuusednetworkkbsread10190848/networkkbsreadnetworkkbswrite5095424/networkkbswriteguestoside5eba5c4-c019-11e3-907f-4adf980f9414/guestosidrootdeviceid0/rootdeviceidrootdevicetypeROOT/rootdevicetypenicida1c079e5-ae0f-4470-b0ed-26895fbcf14d/idnetworkidf1cf7cfb-c354-47c4-854e-af329c54d77e/networkidnetworknametestD11A-TestVMList-3385RP-network/networknamenetmask255.255.255.0/netmaskgateway10.1.1.1/gatewayipaddress10.1.1.217/ipaddressisolationurivlan://1071/isolationuribroadcasturivlan://1071/broadcasturitraffictypeGuest/traffictypetypeIsolated/typeisdefaulttrue/isdefaultmacaddress02:00:06:7b:00:01/macaddress/nichypervisorSimulator/hypervisorisdynamicallyscalablefalse/isdynamicallyscalableostypeid11/ostypeid/virtualmachinevirtualmachineid660a829f-5265-44c3-aa92-957d8bbec8e2/idnamed1a/namedisplaynamed1b/displaynameaccounttestD1B-TestVMList-CB23CT/accountdomainiddc4bf103-27bf-4292-99aa-dc91fa23ee04/domainiddomainD1-NN5QWT/domaincreated2014-04-10T09:01:32-0400/createdstateRunning/statehaenablefalse/haenablezoneid75d61334-ff70-49c3-99ed-3af702cd51d7/zoneidzonenameBLR1/zonenametemplateide65cdfa0-c019-11e3-907f-4adf980f9414/templateidtemplatenameCentOS
  5.3(64-bit) no GUI (Simulator)/templatenametemplatedisplaytextCentOS 
 5.3(64-bit) no GUI 
 (Simulator)/templatedisplaytextpasswordenabledfalse/passwordenabledserviceofferingid49dee9f8-a49a-414d-b8b2-b0d59b5981f0/serviceofferingidserviceofferingnameSmall

[jira] [Updated] (CLOUDSTACK-6381) IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with out passing isrecursive falg) , all Vms from the subdomain are also listed.

2014-04-18 Thread Sangeetha Hariharan (JIRA) 

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-6381?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sangeetha Hariharan updated CLOUDSTACK-6381:


Component/s: (was: Management Server)
 IAM

 IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with 
 out passing isrecursive falg) , all Vms from the subdomain are also listed.
 

 Key: CLOUDSTACK-6381
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6381
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: IAM
Affects Versions: 4.4.0
 Environment: Build from 4.4.
Reporter: Sangeetha Hariharan
Priority: Critical
 Fix For: 4.4.0


 IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with 
 out passing isrecursive falg) , all Vms from the subdomain are also listed.
 Set up:
 Pre Reqs:
 Admin - Creates object
 Domain Admin  for d1 - D1  - Creates object - d1
 Domain Admin  for d1 - D1/D11
 User account  for d1 - D1/D111 - Creates object - d111a
 Domain Admin  for d1 - D1/D12
 Domain Admin  for d2 - D2 - Creates object -d2
 User Account in domain D1 - userD1-1 - Creates object -d1a 
 User Account in domain D1 - userD1-2 - Creates object - d1b
 User Account in domain D1/D11 - userD1-a - Creates object - d11a
 User Account in domain D1/D11 - userD1-a - Creates object - d11b
 User Account in domain D1/D12- userD1-b - Creates object - d12a
 User Account in domain D1/D12 - userD-a - Creates object - d12b
 As domain admin - D1 , i tried to listVistualMachines passing listAll=true 
 parameter (no isrecurssive parameter). 
 Expected result:
 only all the Vms that belong to this domain should be listed , which should 
 be 3 Vms , d1,d1a and d1b.
 But I see 8 Vms being returned , which also includes the Vms in the domain, 
 d12 and d111.
 GET 
 http://10.223.49.6/client/api?command=listVirtualMachineslistAll=trueapiKey=Hv0VKnmBjXhyRMKZ7ixI51gG-iqHqRVTp1xCCLU2-gTnZwhuUNWsa4zZLYZWWLD5lEhvwe05tJKJVa9NeS5REwsignature=cDqQMD6qlKeiz2g40pSOYqJKqoE%3D
  \n\n
 ?xml version=1.0 encoding=UTF-8?listvirtualmachinesresponse 
 cloud-stack-version=4.4.0-SNAPSHOTcount8/countvirtualmachineid22193996-12f9-46ff-91cd-3d409f7f8c60/idnamed11a/namedisplaynamed11a/displaynameaccounttestD11A-TestVMList-3385RP/accountdomainid0a0f7c09-2f1a-4939-94ce-88388e197949/domainiddomainD11-UFBXGQ/domaincreated2014-04-10T09:01:37-0400/createdstateRunning/statehaenablefalse/haenablezoneid75d61334-ff70-49c3-99ed-3af702cd51d7/zoneidzonenameBLR1/zonenametemplateide65cdfa0-c019-11e3-907f-4adf980f9414/templateidtemplatenameCentOS
  5.3(64-bit) no GUI (Simulator)/templatenametemplatedisplaytextCentOS 
 5.3(64-bit) no GUI 
 (Simulator)/templatedisplaytextpasswordenabledfalse/passwordenabledserviceofferingid49dee9f8-a49a-414d-b8b2-b0d59b5981f0/serviceofferingidserviceofferingnameSmall
  
 Instance/serviceofferingnamecpunumber1/cpunumbercpuspeed100/cpuspeedmemory128/memorycpuused10%/cpuusednetworkkbsread10190848/networkkbsreadnetworkkbswrite5095424/networkkbswriteguestoside5eba5c4-c019-11e3-907f-4adf980f9414/guestosidrootdeviceid0/rootdeviceidrootdevicetypeROOT/rootdevicetypenicida1c079e5-ae0f-4470-b0ed-26895fbcf14d/idnetworkidf1cf7cfb-c354-47c4-854e-af329c54d77e/networkidnetworknametestD11A-TestVMList-3385RP-network/networknamenetmask255.255.255.0/netmaskgateway10.1.1.1/gatewayipaddress10.1.1.217/ipaddressisolationurivlan://1071/isolationuribroadcasturivlan://1071/broadcasturitraffictypeGuest/traffictypetypeIsolated/typeisdefaulttrue/isdefaultmacaddress02:00:06:7b:00:01/macaddress/nichypervisorSimulator/hypervisorisdynamicallyscalablefalse/isdynamicallyscalableostypeid11/ostypeid/virtualmachinevirtualmachineid660a829f-5265-44c3-aa92-957d8bbec8e2/idnamed1a/namedisplaynamed1b/displaynameaccounttestD1B-TestVMList-CB23CT/accountdomainiddc4bf103-27bf-4292-99aa-dc91fa23ee04/domainiddomainD1-NN5QWT/domaincreated2014-04-10T09:01:32-0400/createdstateRunning/statehaenablefalse/haenablezoneid75d61334-ff70-49c3-99ed-3af702cd51d7/zoneidzonenameBLR1/zonenametemplateide65cdfa0-c019-11e3-907f-4adf980f9414/templateidtemplatenameCentOS
  5.3(64-bit) no GUI (Simulator)/templatenametemplatedisplaytextCentOS 
 5.3(64-bit) no GUI 
 (Simulator)/templatedisplaytextpasswordenabledfalse/passwordenabledserviceofferingid49dee9f8-a49a-414d-b8b2-b0d59b5981f0/serviceofferingidserviceofferingnameSmall

[jira] [Updated] (CLOUDSTACK-6381) IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with out passing isrecursive falg) , all Vms from the subdomain are also listed.

2014-04-10 Thread Sangeetha Hariharan (JIRA) 

 [ 
https://issues.apache.org/jira/browse/CLOUDSTACK-6381?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sangeetha Hariharan updated CLOUDSTACK-6381:


Summary: IAM - DomainAdmin - When listVirtualMachines is used with 
listall=true (with out passing isrecursive falg) , all Vms from the subdomain 
are also listed.  (was: IAM -IAM - DomainAdmin - When listVirtualMachines is 
used with listall=true (with out passing isrecursive falg) , all Vms from the 
subdomain are also listed.)

 IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with 
 out passing isrecursive falg) , all Vms from the subdomain are also listed.
 

 Key: CLOUDSTACK-6381
 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6381
 Project: CloudStack
  Issue Type: Bug
  Security Level: Public(Anyone can view this level - this is the 
 default.) 
  Components: Management Server
Affects Versions: 4.4.0
 Environment: Build from 4.4.
Reporter: Sangeetha Hariharan
Priority: Critical
 Fix For: 4.4.0


 IAM - DomainAdmin - When listVirtualMachines is used with listall=true (with 
 out passing isrecursive falg) , all Vms from the subdomain are also listed.
 Set up:
 Pre Reqs:
 Admin - Creates object
 Domain Admin  for d1 - D1  - Creates object - d1
 Domain Admin  for d1 - D1/D11
 User account  for d1 - D1/D111 - Creates object - d111a
 Domain Admin  for d1 - D1/D12
 Domain Admin  for d2 - D2 - Creates object -d2
 User Account in domain D1 - userD1-1 - Creates object -d1a 
 User Account in domain D1 - userD1-2 - Creates object - d1b
 User Account in domain D1/D11 - userD1-a - Creates object - d11a
 User Account in domain D1/D11 - userD1-a - Creates object - d11b
 User Account in domain D1/D12- userD1-b - Creates object - d12a
 User Account in domain D1/D12 - userD-a - Creates object - d12b
 As domain admin - D1 , i tried to listVistualMachines passing listAll=true 
 parameter (no isrecurssive parameter). 
 Expected result:
 only all the Vms that belong to this domain should be listed , which should 
 be 3 Vms , d1,d1a and d1b.
 But I see 8 Vms being returned , which also includes the Vms in the domain, 
 d12 and d111.
 GET 
 http://10.223.49.6/client/api?command=listVirtualMachineslistAll=trueapiKey=Hv0VKnmBjXhyRMKZ7ixI51gG-iqHqRVTp1xCCLU2-gTnZwhuUNWsa4zZLYZWWLD5lEhvwe05tJKJVa9NeS5REwsignature=cDqQMD6qlKeiz2g40pSOYqJKqoE%3D
  \n\n
 ?xml version=1.0 encoding=UTF-8?listvirtualmachinesresponse 
 cloud-stack-version=4.4.0-SNAPSHOTcount8/countvirtualmachineid22193996-12f9-46ff-91cd-3d409f7f8c60/idnamed11a/namedisplaynamed11a/displaynameaccounttestD11A-TestVMList-3385RP/accountdomainid0a0f7c09-2f1a-4939-94ce-88388e197949/domainiddomainD11-UFBXGQ/domaincreated2014-04-10T09:01:37-0400/createdstateRunning/statehaenablefalse/haenablezoneid75d61334-ff70-49c3-99ed-3af702cd51d7/zoneidzonenameBLR1/zonenametemplateide65cdfa0-c019-11e3-907f-4adf980f9414/templateidtemplatenameCentOS
  5.3(64-bit) no GUI (Simulator)/templatenametemplatedisplaytextCentOS 
 5.3(64-bit) no GUI 
 (Simulator)/templatedisplaytextpasswordenabledfalse/passwordenabledserviceofferingid49dee9f8-a49a-414d-b8b2-b0d59b5981f0/serviceofferingidserviceofferingnameSmall
  
 Instance/serviceofferingnamecpunumber1/cpunumbercpuspeed100/cpuspeedmemory128/memorycpuused10%/cpuusednetworkkbsread10190848/networkkbsreadnetworkkbswrite5095424/networkkbswriteguestoside5eba5c4-c019-11e3-907f-4adf980f9414/guestosidrootdeviceid0/rootdeviceidrootdevicetypeROOT/rootdevicetypenicida1c079e5-ae0f-4470-b0ed-26895fbcf14d/idnetworkidf1cf7cfb-c354-47c4-854e-af329c54d77e/networkidnetworknametestD11A-TestVMList-3385RP-network/networknamenetmask255.255.255.0/netmaskgateway10.1.1.1/gatewayipaddress10.1.1.217/ipaddressisolationurivlan://1071/isolationuribroadcasturivlan://1071/broadcasturitraffictypeGuest/traffictypetypeIsolated/typeisdefaulttrue/isdefaultmacaddress02:00:06:7b:00:01/macaddress/nichypervisorSimulator/hypervisorisdynamicallyscalablefalse/isdynamicallyscalableostypeid11/ostypeid/virtualmachinevirtualmachineid660a829f-5265-44c3-aa92-957d8bbec8e2/idnamed1a/namedisplaynamed1b/displaynameaccounttestD1B-TestVMList-CB23CT/accountdomainiddc4bf103-27bf-4292-99aa-dc91fa23ee04/domainiddomainD1-NN5QWT/domaincreated2014-04-10T09:01:32-0400/createdstateRunning/statehaenablefalse/haenablezoneid75d61334-ff70-49c3-99ed-3af702cd51d7/zoneidzonenameBLR1/zonenametemplateide65cdfa0-c019-11e3-907f-4adf980f9414/templateidtemplatenameCentOS
  5.3(64-bit) no GUI (Simulator)/templatenametemplatedisplaytextCentOS 
 5.3(64-bit) no GUI