Bug #3381
The default create ACL rule only applies to zone 0
| Status: | Closed | Start date: | 11/26/2014 | |
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assignee: |  Carlos Martín | % Done: | 0% | |
| Category: | Core & System | |||
| Target version: | Release 4.10.2 | |||
| Resolution: | fixed | Pull request: | ||
| Affected Versions: | OpenNebula 4.10 |
Description
The bootstrap creates the rule "@1 VM+NET+IMAGE+TEMPLATE+DOCUMENT/* CREATE #0", but it is different from the default rule for new groups: "@100 VM+IMAGE+TEMPLATE+DOCUMENT/* CREATE *"
First, it allows users to create vnets. Second, it only applies to zone 0. If a slave is added to the federation, users in group 1 can't create resources in there.
Associated revisions
Bug #3381: Change default group acl rule to match the one for new groups
Bug #3381: Change default group acl rule to match the one for new groups
(cherry picked from commit b09e87314f0d0ffb9d29e0b798a9fa6377b0f875)
History
#1
Updated by Ruben S. Montero over 6 years ago
- Target version changed from Release 4.12 to Release 4.10.2
#2
Updated by Ruben S. Montero over 6 years ago
- Assignee set to Carlos Martín
#3
Updated by Carlos Martín over 6 years ago
- Status changed from New to Closed
- Resolution set to fixed