Repository navigation
ACS 4.19.1 | Full Network List visible for Domain Admin #9456
Description
ISSUE TYPE
- Bug Report
COMPONENT NAME
API, UI
CLOUDSTACK VERSION
4.19.1
CONFIGURATION
4.19.1
Advanced Zone / Without Security Groups
Hypervisor : XCP-ng
OS / ENVIRONMENT
Ubuntu 20.04
SUMMARY
STEPS TO REPRODUCE
Login To Cloudstack UI using a Domain Admin Credentials
Domain Admin is able to see Networks that belongs to other Domains
EXPECTED RESULTS
Domain Admin Should See Only Networks Belonging to His Domain
ACTUAL RESULTS
Domain Admin is able to see Networks that belongs to other Domains.
Note: He cannot perform any account actions on other domain accounts
Activity
nvazquez commentedon Jul 26, 2024
Thanks @midhunpjos - I tested 4.19.0 as well and couldn't reproduce the issue. I can reproduce it on 4.19.1
nvazquez commentedon Jul 26, 2024
Confirmed on 4.19.1:
winterhazel commentedon Jul 27, 2024
Adding to @nvazquez's comment that this is not exclusive to domain admins: normal users are able to see networks that belong to other domains and that they should not have access to by using the "shared" filter.
yadvr commentedon Jul 27, 2024
@nvazquez @winterhazel thanks for the investigation and comments; Fair to say we’ve established it only affects 4.19.1, while we work on this - suggested workaround is for users to downgrade or not upgrade to 4.19.1.0.
cc @JoaoJandre @weizhouapache @shwstppr @sureshanaparti @harikrishna-patnala @DaanHoogland @borisstoyanov and others
winterhazel commentedon Jul 29, 2024
Hey everyone, I sent a PR to fix this issue in #9461, could you guys take a look and tell me what you think?
yadvr commentedon Aug 22, 2024
Closing as the issue was reverted, confirmed by @shwstppr