RE: if anybody know how to restrict access to a specific zone

2013-06-12 Thread Pranav Saxena
Here is the functional spec -

https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dedicated+Resources+-+Private+zone,+pod,+cluster,+host+Functional+Spec
 
In my last statement ,  a user anyways can't see the infrastructure section on 
the UI . So by  allowing the root admin to dedicate a  zone to an 
domain/account , that account can only use that zone's resources.

-Original Message-
From: Pranav Saxena [mailto:pranav.sax...@citrix.com] 
Sent: Wednesday, June 12, 2013 7:54 PM
To: users@cloudstack.apache.org; d...@cloudstack.apache.org; 
users...@cloudstack.apache.org
Subject: RE: if anybody know how to restrict access to a specific zone

Hi ,

You could let the root admin dedicate a zone to specific domain/account . In 
that case only that user would have access to that zone.  This is a new feature 
introduced in 4.2

Thanks,
Pranav

-Original Message-
From: William Jiang [mailto:william.ji...@manwin.com] 
Sent: Wednesday, June 12, 2013 7:45 PM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org; 
users...@cloudstack.apache.org
Subject: RE: if anybody know how to restrict access to a specific zone

Hi Jessica,
Thanks for the response. What's the difference of those three roles?
If I understand right, I will give it the role of "normal-user" .

Thanks,
William

-Original Message-
From: Jessica Wang [mailto:jessica.w...@citrix.com]
Sent: June-11-13 6:23 PM
To: users@cloudstack.apache.org; d...@cloudstack.apache.org; 
users...@cloudstack.apache.org
Subject: RE: if anybody know how to restrict access to a specific zone

> I want to give access to a user to see only a specific zone.

What is the role of the user that you want to give access to see only a 
specific zone?
A normal-user, a domain-admin, or a root-admin?


-Original Message-
From: William Jiang [mailto:william.ji...@manwin.com]
Sent: Tuesday, June 11, 2013 3:17 PM
To: d...@cloudstack.apache.org; users...@cloudstack.apache.org; 
users@cloudstack.apache.org
Subject: if anybody know how to restrict access to a specific zone

Hi,

if anybody know how to restrict access to a specific zone? We have multiple 
zone in our cloudstack 3.0 and I want to give access to a user to see only a 
specific zone.

Thanks,
William
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier ?lectronique est 
confidentiel et prot?g?. L'exp?diteur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) d?sign?(s) est interdite. Si vous recevez ce courrier 
?lectronique par erreur, veuillez m'en aviser imm?diatement, par retour de 
courrier ?lectronique ou par un autre moyen.
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier électronique est 
confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) désigné(s) est interdite. Si vous recevez ce courrier 
électronique par erreur, veuillez m'en aviser immédiatement, par retour de 
courrier électronique ou par un autre moyen.


RE: if anybody know how to restrict access to a specific zone

2013-06-12 Thread Pranav Saxena
Hi ,

You could let the root admin dedicate a zone to specific domain/account . In 
that case only that user would have access to that zone.  This is a new feature 
introduced in 4.2

Thanks,
Pranav

-Original Message-
From: William Jiang [mailto:william.ji...@manwin.com] 
Sent: Wednesday, June 12, 2013 7:45 PM
To: d...@cloudstack.apache.org; users@cloudstack.apache.org; 
users...@cloudstack.apache.org
Subject: RE: if anybody know how to restrict access to a specific zone

Hi Jessica,
Thanks for the response. What's the difference of those three roles?
If I understand right, I will give it the role of "normal-user" .

Thanks,
William

-Original Message-
From: Jessica Wang [mailto:jessica.w...@citrix.com]
Sent: June-11-13 6:23 PM
To: users@cloudstack.apache.org; d...@cloudstack.apache.org; 
users...@cloudstack.apache.org
Subject: RE: if anybody know how to restrict access to a specific zone

> I want to give access to a user to see only a specific zone.

What is the role of the user that you want to give access to see only a 
specific zone?
A normal-user, a domain-admin, or a root-admin?


-Original Message-
From: William Jiang [mailto:william.ji...@manwin.com]
Sent: Tuesday, June 11, 2013 3:17 PM
To: d...@cloudstack.apache.org; users...@cloudstack.apache.org; 
users@cloudstack.apache.org
Subject: if anybody know how to restrict access to a specific zone

Hi,

if anybody know how to restrict access to a specific zone? We have multiple 
zone in our cloudstack 3.0 and I want to give access to a user to see only a 
specific zone.

Thanks,
William
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier ?lectronique est 
confidentiel et prot?g?. L'exp?diteur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) d?sign?(s) est interdite. Si vous recevez ce courrier 
?lectronique par erreur, veuillez m'en aviser imm?diatement, par retour de 
courrier ?lectronique ou par un autre moyen.
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier électronique est 
confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) désigné(s) est interdite. Si vous recevez ce courrier 
électronique par erreur, veuillez m'en aviser immédiatement, par retour de 
courrier électronique ou par un autre moyen.


RE: if anybody know how to restrict access to a specific zone

2013-06-12 Thread William Jiang
Hi Nitin,
Thanks for the response, but I can't open the link you send to me, would you 
mind double check and re-send to me?
Thanks.

William

-Original Message-
From: Nitin Mehta [mailto:nitin.me...@citrix.com]
Sent: June-12-13 2:08 AM
To: d...@cloudstack.apache.org; users...@cloudstack.apache.org; 
users@cloudstack.apache.org
Subject: Re: if anybody know how to restrict access to a specific zone

William - good use case, CS has the ability to dedicate resources to an account 
domain, but not restrict them. You can read about that here - 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dedicated+Resources+
-+Private+zone%2C+pod%2C+cluster%2C+host+Functional+Spec

Do you want to raise an enhancement for restricting a domain/account to a zone ?

Thanks,
-Nitin

On 12/06/13 3:47 AM, "William Jiang"  wrote:

>Hi,
>
>if anybody know how to restrict access to a specific zone? We have
>multiple zone in our cloudstack 3.0 and I want to give access to a user
>to see only a specific zone.
>
>Thanks,
>William
>This e-mail may be privileged and/or confidential, and the sender does
>not waive any related rights and obligations. Any distribution, use or
>copying of this e-mail or the information it contains by other than an
>intended recipient is unauthorized. If you received this e-mail in
>error, please advise me (by return e-mail or otherwise) immediately. Ce
>courrier ?lectronique est confidentiel et prot?g?. L'exp?diteur ne
>renonce pas aux droits et obligations qui s'y rapportent. Toute
>diffusion, utilisation ou copie de ce message ou des renseignements
>qu'il contient par une personne autre que le (les) destinataire(s)
>d?sign?(s) est interdite. Si vous recevez ce courrier ?lectronique par
>erreur, veuillez m'en aviser imm?diatement, par retour de courrier 
>?lectronique ou par un autre moyen.

This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier électronique est 
confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) désigné(s) est interdite. Si vous recevez ce courrier 
électronique par erreur, veuillez m'en aviser immédiatement, par retour de 
courrier électronique ou par un autre moyen.


RE: if anybody know how to restrict access to a specific zone

2013-06-12 Thread William Jiang
Hi Jessica,
Thanks for the response. What's the difference of those three roles?
If I understand right, I will give it the role of "normal-user" .

Thanks,
William

-Original Message-
From: Jessica Wang [mailto:jessica.w...@citrix.com]
Sent: June-11-13 6:23 PM
To: users@cloudstack.apache.org; d...@cloudstack.apache.org; 
users...@cloudstack.apache.org
Subject: RE: if anybody know how to restrict access to a specific zone

> I want to give access to a user to see only a specific zone.

What is the role of the user that you want to give access to see only a 
specific zone?
A normal-user, a domain-admin, or a root-admin?


-Original Message-
From: William Jiang [mailto:william.ji...@manwin.com]
Sent: Tuesday, June 11, 2013 3:17 PM
To: d...@cloudstack.apache.org; users...@cloudstack.apache.org; 
users@cloudstack.apache.org
Subject: if anybody know how to restrict access to a specific zone

Hi,

if anybody know how to restrict access to a specific zone? We have multiple 
zone in our cloudstack 3.0 and I want to give access to a user to see only a 
specific zone.

Thanks,
William
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier ?lectronique est 
confidentiel et prot?g?. L'exp?diteur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) d?sign?(s) est interdite. Si vous recevez ce courrier 
?lectronique par erreur, veuillez m'en aviser imm?diatement, par retour de 
courrier ?lectronique ou par un autre moyen.
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier électronique est 
confidentiel et protégé. L'expéditeur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) désigné(s) est interdite. Si vous recevez ce courrier 
électronique par erreur, veuillez m'en aviser immédiatement, par retour de 
courrier électronique ou par un autre moyen.


Re: if anybody know how to restrict access to a specific zone

2013-06-11 Thread Nitin Mehta
William - good use case, CS has the ability to dedicate resources to an
account domain, but not restrict them. You can read about that here -
https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dedicated+Resources+
-+Private+zone%2C+pod%2C+cluster%2C+host+Functional+Spec

Do you want to raise an enhancement for restricting a domain/account to a
zone ?

Thanks,
-Nitin

On 12/06/13 3:47 AM, "William Jiang"  wrote:

>Hi,
>
>if anybody know how to restrict access to a specific zone? We have
>multiple zone in our cloudstack 3.0 and I want to give access to a user
>to see only a specific zone.
>
>Thanks,
>William
>This e-mail may be privileged and/or confidential, and the sender does
>not waive any related rights and obligations. Any distribution, use or
>copying of this e-mail or the information it contains by other than an
>intended recipient is unauthorized. If you received this e-mail in error,
>please advise me (by return e-mail or otherwise) immediately. Ce courrier
>?lectronique est confidentiel et prot?g?. L'exp?diteur ne renonce pas aux
>droits et obligations qui s'y rapportent. Toute diffusion, utilisation ou
>copie de ce message ou des renseignements qu'il contient par une personne
>autre que le (les) destinataire(s) d?sign?(s) est interdite. Si vous
>recevez ce courrier ?lectronique par erreur, veuillez m'en aviser
>imm?diatement, par retour de courrier ?lectronique ou par un autre moyen.



RE: if anybody know how to restrict access to a specific zone

2013-06-11 Thread Jessica Wang
> I want to give access to a user to see only a specific zone.

What is the role of the user that you want to give access to see only a 
specific zone?
A normal-user, a domain-admin, or a root-admin?


-Original Message-
From: William Jiang [mailto:william.ji...@manwin.com] 
Sent: Tuesday, June 11, 2013 3:17 PM
To: d...@cloudstack.apache.org; users...@cloudstack.apache.org; 
users@cloudstack.apache.org
Subject: if anybody know how to restrict access to a specific zone

Hi,

if anybody know how to restrict access to a specific zone? We have multiple 
zone in our cloudstack 3.0 and I want to give access to a user to see only a 
specific zone.

Thanks,
William
This e-mail may be privileged and/or confidential, and the sender does not 
waive any related rights and obligations. Any distribution, use or copying of 
this e-mail or the information it contains by other than an intended recipient 
is unauthorized. If you received this e-mail in error, please advise me (by 
return e-mail or otherwise) immediately. Ce courrier ?lectronique est 
confidentiel et prot?g?. L'exp?diteur ne renonce pas aux droits et obligations 
qui s'y rapportent. Toute diffusion, utilisation ou copie de ce message ou des 
renseignements qu'il contient par une personne autre que le (les) 
destinataire(s) d?sign?(s) est interdite. Si vous recevez ce courrier 
?lectronique par erreur, veuillez m'en aviser imm?diatement, par retour de 
courrier ?lectronique ou par un autre moyen.