Bug #3381

The default create ACL rule only applies to zone 0

Added by Carlos Martín over 6 years ago. Updated over 6 years ago.

Status:ClosedStart date:11/26/2014
Priority:NormalDue date:
Assignee:Carlos Martín% Done:

0%

Category:Core & System
Target version:Release 4.10.2
Resolution:fixed Pull request:
Affected Versions:OpenNebula 4.10

Description

The bootstrap creates the rule "@1 VM+NET+IMAGE+TEMPLATE+DOCUMENT/* CREATE #0", but it is different from the default rule for new groups: "@100 VM+IMAGE+TEMPLATE+DOCUMENT/* CREATE *"

First, it allows users to create vnets. Second, it only applies to zone 0. If a slave is added to the federation, users in group 1 can't create resources in there.

Associated revisions

Revision b09e8731
Added by Carlos Martín over 6 years ago

Bug #3381: Change default group acl rule to match the one for new groups

Revision da7b2973
Added by Carlos Martín over 6 years ago

Bug #3381: Change default group acl rule to match the one for new groups

(cherry picked from commit b09e87314f0d0ffb9d29e0b798a9fa6377b0f875)

History

#1 Updated by Ruben S. Montero over 6 years ago

  • Target version changed from Release 4.12 to Release 4.10.2

#2 Updated by Ruben S. Montero over 6 years ago

  • Assignee set to Carlos Martín

#3 Updated by Carlos Martín over 6 years ago

  • Status changed from New to Closed
  • Resolution set to fixed

Also available in: Atom PDF