Re: Disallow users the ability to add templates/ISOs
There is one glaring problem with preventing users from creating templates, you also remove the ability to restore a VM from a snapshot as this requires the creation of a new template. Regards Geoff Higginbottom CTO / Cloud Architect D: +44 20 3603 0542 | S: +44 20 3603 0540| M: +447968161581 geoff.higginbot...@shapeblue.com<mailto:geoff.higginbot...@shapeblue.com> |www.shapeblue.com | Twitter:@shapeblue<https://twitter.com/#!/shapeblue> ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS On 25 Jul 2013, at 09:55, "Nitin Mehta" mailto:nitin.me...@citrix.com>> wrote: You can also set the resource limit for the users as 0 (change the max.template limit in the global config). This would not allow them to submit any template or create template from volume/snapshot or copy template. In case you want to give permissions to specific users you can manage through this as well. If you want to go through Chips route you need to change the permissions for register Template/ISO, copyTemplate/Iso, createTemplate Thanks, -Nitin On 25/07/13 2:14 AM, "Alena Prokharchyk" mailto:alena.prokharc...@citrix.com>> wrote: There are just couple of template related global configs: allow.public.user.templates - If false, users will not be able to create public templates. max.template.iso.size - The maximum size for a downloaded template or ISO (in GB). You can set max.template.iso.size to 0, and user won't be able to download anything. Or as Chip stated already, you can change the permission in commands.properties for createTemplate command. -Alena. From: Chip Childers mailto:chip.child...@sungard.com><mailto:chip.child...@sungard.com>> Reply-To: "users@cloudstack.apache.org<mailto:users@cloudstack.apache.org><mailto:users@cloudstack.apache.org>" mailto:users@cloudstack.apache.org><mailto:users@cloudstack.apache.org>> Date: Wednesday, July 24, 2013 12:04 PM To: "mailto:users@cloudstack.apache.org><mailto:users@cloudstack.apache.org>>" mailto:users@cloudstack.apache.org><mailto:users@cloudstack.apache.org>> Subject: Re: Disallow users the ability to add templates/ISOs Unless there is a setting somewhere that might do this for you completely, yeah. On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer mailto:kirk.jant...@gmail.com><mailto:kirk.jant...@gmail.com>>wrote: So, even if I were able to disable it for users in the UI, i'd still have to change the API ACL to completely disallow it? On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers mailto:chip.child...@sungard.com><mailto:chip.child...@sungard.com> wrote: FWIW, I'm not sure about in the UI, but you can change the API's ACL for those commands within the commands.properties file to be root admin only. This will probably leave the UI with the buttons, but will always fail for the users. On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer mailto:kirk.jant...@gmail.com><mailto:kirk.jant...@gmail.com> wrote: I recall it being talked about in the past, but can't seem to find it. Is there a way to disallow users from being able to add their own templates/ISOs? -- Regards, Kirk Jantzer http://about.met/kirkjantzer -- Regards, Kirk Jantzer c: (678) 561-5475 http://about.met/kirkjantzer This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
Re: Disallow users the ability to add templates/ISOs
You can also set the resource limit for the users as 0 (change the max.template limit in the global config). This would not allow them to submit any template or create template from volume/snapshot or copy template. In case you want to give permissions to specific users you can manage through this as well. If you want to go through Chips route you need to change the permissions for register Template/ISO, copyTemplate/Iso, createTemplate Thanks, -Nitin On 25/07/13 2:14 AM, "Alena Prokharchyk" wrote: >There are just couple of template related global configs: > >allow.public.user.templates - If false, users will not be able to create >public templates. >max.template.iso.size - The maximum size for a downloaded template or ISO >(in GB). > >You can set max.template.iso.size to 0, and user won't be able to >download anything. >Or as Chip stated already, you can change the permission in >commands.properties for createTemplate command. > >-Alena. > >From: Chip Childers >mailto:chip.child...@sungard.com>> >Reply-To: >"users@cloudstack.apache.org<mailto:users@cloudstack.apache.org>" >mailto:users@cloudstack.apache.org>> >Date: Wednesday, July 24, 2013 12:04 PM >To: "mailto:users@cloudstack.apache.org>>" >mailto:users@cloudstack.apache.org>> >Subject: Re: Disallow users the ability to add templates/ISOs > >Unless there is a setting somewhere that might do this for you completely, >yeah. > > >On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer >mailto:kirk.jant...@gmail.com>>wrote: > >So, even if I were able to disable it for users in the UI, i'd still have >to change the API ACL to completely disallow it? > > >On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers >mailto:chip.child...@sungard.com> >>wrote: > >> FWIW, I'm not sure about in the UI, but you can change the API's ACL for >> those commands within the commands.properties file to be root admin >>only. >> >> This will probably leave the UI with the buttons, but will always fail >for >> the users. >> >> >> On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer >>mailto:kirk.jant...@gmail.com> >> >wrote: >> >> > I recall it being talked about in the past, but can't seem to find it. >Is >> > there a way to disallow users from being able to add their own >> > templates/ISOs? >> > >> > -- >> > Regards, >> > >> > Kirk Jantzer >> > http://about.met/kirkjantzer >> > >> > > > >-- >Regards, > >Kirk Jantzer >c: (678) 561-5475 >http://about.met/kirkjantzer > >
Re: Disallow users the ability to add templates/ISOs
There are just couple of template related global configs: allow.public.user.templates - If false, users will not be able to create public templates. max.template.iso.size - The maximum size for a downloaded template or ISO (in GB). You can set max.template.iso.size to 0, and user won't be able to download anything. Or as Chip stated already, you can change the permission in commands.properties for createTemplate command. -Alena. From: Chip Childers mailto:chip.child...@sungard.com>> Reply-To: "users@cloudstack.apache.org<mailto:users@cloudstack.apache.org>" mailto:users@cloudstack.apache.org>> Date: Wednesday, July 24, 2013 12:04 PM To: "mailto:users@cloudstack.apache.org>>" mailto:users@cloudstack.apache.org>> Subject: Re: Disallow users the ability to add templates/ISOs Unless there is a setting somewhere that might do this for you completely, yeah. On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer mailto:kirk.jant...@gmail.com>>wrote: So, even if I were able to disable it for users in the UI, i'd still have to change the API ACL to completely disallow it? On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers mailto:chip.child...@sungard.com> >wrote: > FWIW, I'm not sure about in the UI, but you can change the API's ACL for > those commands within the commands.properties file to be root admin only. > > This will probably leave the UI with the buttons, but will always fail for > the users. > > > On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer > mailto:kirk.jant...@gmail.com> > >wrote: > > > I recall it being talked about in the past, but can't seem to find it. Is > > there a way to disallow users from being able to add their own > > templates/ISOs? > > > > -- > > Regards, > > > > Kirk Jantzer > > http://about.met/kirkjantzer > > > -- Regards, Kirk Jantzer c: (678) 561-5475 http://about.met/kirkjantzer
Re: Disallow users the ability to add templates/ISOs
Unless there is a setting somewhere that might do this for you completely, yeah. On Wed, Jul 24, 2013 at 3:02 PM, Kirk Jantzer wrote: > So, even if I were able to disable it for users in the UI, i'd still have > to change the API ACL to completely disallow it? > > > On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers >wrote: > > > FWIW, I'm not sure about in the UI, but you can change the API's ACL for > > those commands within the commands.properties file to be root admin only. > > > > This will probably leave the UI with the buttons, but will always fail > for > > the users. > > > > > > On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer > >wrote: > > > > > I recall it being talked about in the past, but can't seem to find it. > Is > > > there a way to disallow users from being able to add their own > > > templates/ISOs? > > > > > > -- > > > Regards, > > > > > > Kirk Jantzer > > > http://about.met/kirkjantzer > > > > > > > > > -- > Regards, > > Kirk Jantzer > c: (678) 561-5475 > http://about.met/kirkjantzer >
Re: Disallow users the ability to add templates/ISOs
So, even if I were able to disable it for users in the UI, i'd still have to change the API ACL to completely disallow it? On Wed, Jul 24, 2013 at 2:58 PM, Chip Childers wrote: > FWIW, I'm not sure about in the UI, but you can change the API's ACL for > those commands within the commands.properties file to be root admin only. > > This will probably leave the UI with the buttons, but will always fail for > the users. > > > On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer >wrote: > > > I recall it being talked about in the past, but can't seem to find it. Is > > there a way to disallow users from being able to add their own > > templates/ISOs? > > > > -- > > Regards, > > > > Kirk Jantzer > > http://about.met/kirkjantzer > > > -- Regards, Kirk Jantzer c: (678) 561-5475 http://about.met/kirkjantzer
Re: Disallow users the ability to add templates/ISOs
FWIW, I'm not sure about in the UI, but you can change the API's ACL for those commands within the commands.properties file to be root admin only. This will probably leave the UI with the buttons, but will always fail for the users. On Wed, Jul 24, 2013 at 2:46 PM, Kirk Jantzer wrote: > I recall it being talked about in the past, but can't seem to find it. Is > there a way to disallow users from being able to add their own > templates/ISOs? > > -- > Regards, > > Kirk Jantzer > http://about.met/kirkjantzer >
Disallow users the ability to add templates/ISOs
I recall it being talked about in the past, but can't seem to find it. Is there a way to disallow users from being able to add their own templates/ISOs? -- Regards, Kirk Jantzer http://about.met/kirkjantzer
