manasaveloori created CLOUDSTACK-2949:
-----------------------------------------

             Summary: [VPC][UI]ListNetworkACL while creating a private gateway 
is listing all the ACLs irrespective of VPC/zone/Domian/account.
                 Key: CLOUDSTACK-2949
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2949
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: UI
    Affects Versions: 4.2.0
            Reporter: manasaveloori
             Fix For: 4.2.0


Steps:
1.      Have a CS with 2 advanced zones and 1 non root account user.
2.      Login as admin.
3.      Create a VPC in zone1 and create an ACL under that VPC.
4.      Create a VPC in zone 2 and create an ACL under that VPC.
5.      Now login as a user (non root domain).
6.      Create a VPC and create an ACL under that VPC.
7.      Login as admin and try to create a private gateway for a VPC in any 
zone.
8.      The listnetwork ACL is listing all the ACLs irrespective of 
VPCs/Zones/Domians.
Observation 

The API passed here to list ACLs is 
http://10.147.38.154:8096/client/api?command=listNetworkACLLists 
vpc_id parameter is not passed.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to