diff --git a/server/src/com/cloud/server/ManagementServerImpl.java b/server/src/com/cloud/server/ManagementServerImpl.java index 129039e0156..ad8d835aebf 100755 --- a/server/src/com/cloud/server/ManagementServerImpl.java +++ b/server/src/com/cloud/server/ManagementServerImpl.java @@ -4094,12 +4094,16 @@ public class ManagementServerImpl implements ManagementServer { @Override public ArrayList getCloudIdentifierResponse(GetCloudIdentifierCmd cmd) { Long userId = cmd.getUserId(); + Account caller = UserContext.current().getCaller(); // verify that user exists User user = findUserById(userId); if ((user == null) || (user.getRemoved() != null)) { throw new InvalidParameterValueException("Unable to find active user by id " + userId); } + + // check permissions + _accountMgr.checkAccess(caller, _accountMgr.getAccount(user.getAccountId())); String cloudIdentifier = _configDao.getValue("cloud.identifier"); if (cloudIdentifier == null) {