Re: Service offerings for root domain visible by other domains
Hi Pearl, That’s a little bit annoying since you can actually choose the domain root :) Which I guess would mean the same as just leaving it public, but good to know, then I can work around it. :) -- Jimmy Van: Pearl d'Silva Datum: maandag, 20 november 2023 om 17:06 Aan: users@cloudstack.apache.org Onderwerp: Re: Service offerings for root domain visible by other domains Hi Jimmy, An offering that is set to be accessible by ROOT domain, is available to its children too. i.e., since Domain A is a child domain of ROOT, the offering - Admin Test that was created for ROOT domain, would be accessible to Domain A as well. Afaik, there currently is no way to restrict it only to the ROOT domain (or only to a specific domain). But to have offerings accessible only to a specific child domain(of ROOT) and its children, specify the child domain id. Regards, Pearl From: Jimmy Huybrechts Sent: November 20, 2023 10:25 AM To: users@cloudstack.apache.org Subject: Service offerings for root domain visible by other domains Hi, I’m trying to create some offerings now, according to the documentation I can set domains for which it should be visible, so I created one called “Admin Test” and assigned only ROOT to the offering, now logged in with my test account from domain A which is a domain admin for domain A (no access to root domain). Now when I try to create an instance on my domain admin in domain A I can still see and even use Admin Test which should not be possible to even see for that domain admin. Is there any option I should change for that? As to use that for customers it would be helpful if they can only see what they should see in offerings. -- Jimmy
Re: Service offerings for root domain visible by other domains
Hi Jimmy, An offering that is set to be accessible by ROOT domain, is available to its children too. i.e., since Domain A is a child domain of ROOT, the offering - Admin Test that was created for ROOT domain, would be accessible to Domain A as well. Afaik, there currently is no way to restrict it only to the ROOT domain (or only to a specific domain). But to have offerings accessible only to a specific child domain(of ROOT) and its children, specify the child domain id. Regards, Pearl From: Jimmy Huybrechts Sent: November 20, 2023 10:25 AM To: users@cloudstack.apache.org Subject: Service offerings for root domain visible by other domains Hi, I’m trying to create some offerings now, according to the documentation I can set domains for which it should be visible, so I created one called “Admin Test” and assigned only ROOT to the offering, now logged in with my test account from domain A which is a domain admin for domain A (no access to root domain). Now when I try to create an instance on my domain admin in domain A I can still see and even use Admin Test which should not be possible to even see for that domain admin. Is there any option I should change for that? As to use that for customers it would be helpful if they can only see what they should see in offerings. -- Jimmy
Service offerings for root domain visible by other domains
Hi, I’m trying to create some offerings now, according to the documentation I can set domains for which it should be visible, so I created one called “Admin Test” and assigned only ROOT to the offering, now logged in with my test account from domain A which is a domain admin for domain A (no access to root domain). Now when I try to create an instance on my domain admin in domain A I can still see and even use Admin Test which should not be possible to even see for that domain admin. Is there any option I should change for that? As to use that for customers it would be helpful if they can only see what they should see in offerings. -- Jimmy
