Re: Interesting talk on Puppet+CloudStack

2012-06-15 Thread Jason Davis
Sweet. I do love me some automation... Now if I could convince the .edu I now work for to let me loose on a CS deployment :) On Jun 15, 2012 6:54 PM, "David Nalley" wrote: > http://www.youtube.com/watch?v=c8YWctfOpwo > > Jason Hancock talking about his work with CloudStack at a major motion > pic

Interesting talk on Puppet+CloudStack

2012-06-15 Thread David Nalley
http://www.youtube.com/watch?v=c8YWctfOpwo Jason Hancock talking about his work with CloudStack at a major motion picture studio.

RE: Construct / change role permissions

2012-06-15 Thread Kelven Yang
This might be a separate topic, we just happened to have an internal discussion this morning on how we can improve role based access control in CloudStack, here is a link to part of the presentation I did. Any feedback would be very welcome http://wiki.cloudstack.org/pages/viewpageattachments.a

RE: Construct / change role permissions

2012-06-15 Thread Clayton Weise
Thanks Alena, it's filed as bug 15300. -Original Message- From: Alena Prokharchyk [mailto:alena.prokharc...@citrix.com] Sent: Friday, June 15, 2012 10:10 AM To: cloudstack-users@incubator.apache.org; 'cloudstack-...@incubator.apache.org' Subject: Re: Construct / change role permissions O

Re: Construct / change role permissions

2012-06-15 Thread Alena Prokharchyk
On 6/15/12 9:49 AM, "Clayton Weise" wrote: >With regard to the subject of roles. I've noticed that domain admins do >not have limits enforced. So if a domain is limited to 10 snapshots, a >domain admin can create 11. And because limits cannot be imposed, as far >as we're concerned, this type o

RE: Construct / change role permissions

2012-06-15 Thread Will Chan
That could be a bug. As far as I know domain-admins should be limited as well. Will > -Original Message- > From: Clayton Weise [mailto:cwe...@iswest.net] > Sent: Friday, June 15, 2012 9:50 AM > To: 'cloudstack-...@incubator.apache.org'; 'cloudstack- > us...@incubator.apache.org' > Sub

RE: Construct / change role permissions

2012-06-15 Thread Clayton Weise
With regard to the subject of roles. I've noticed that domain admins do not have limits enforced. So if a domain is limited to 10 snapshots, a domain admin can create 11. And because limits cannot be imposed, as far as we're concerned, this type of user is pretty much useless because we have

RE: Construct / change role permissions

2012-06-15 Thread Will Chan
You are correct that Cloudstack has created essentially three static roles today. The most you can do today is to allow/disallow API commands to each role via the commands.properties file. It has been something that has been requested many times before, however, most production systems that

Construct / change role permissions

2012-06-15 Thread Olga Smola
Hi, I would like to discuss CloudStack roles capabilities. As far as I understand, there are 3 distinct roles and there is no possibility to change any role permissions. Sometimes it's not so comfortable for situation when it is needed to allow some action from one role to another one. For example