From 083ac069ca47a8f96ed9306994e5fbe66352ebc0 Mon Sep 17 00:00:00 2001 From: Gabriel Pordeus Santos Date: Fri, 21 Jun 2024 05:58:46 -0300 Subject: [PATCH] fix assignvm template permission check (#8886) --- server/src/main/java/com/cloud/vm/UserVmManagerImpl.java | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java b/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java index f68b3a6237a..9f0adf9d5fd 100644 --- a/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java +++ b/server/src/main/java/com/cloud/vm/UserVmManagerImpl.java @@ -7223,10 +7223,7 @@ public class UserVmManagerImpl extends ManagerBase implements UserVmManager, Vir if (template == null) { throw new InvalidParameterValueException(String.format("Template for VM: %s cannot be found", vm.getUuid())); } - if (!template.isPublicTemplate()) { - Account templateOwner = _accountMgr.getAccount(template.getAccountId()); - _accountMgr.checkAccess(newAccount, null, true, templateOwner); - } + _accountMgr.checkAccess(newAccount, AccessType.UseEntry, true, template); // VV 5: check the new account can create vm in the domain DomainVO domain = _domainDao.findById(cmd.getDomainId());