etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

CLOUDSTACK-3361. [Projects] Allow a normal user to edit public templates created by him.

This commit is contained in:
Likitha Shetty 2013-07-05 16:15:29 +05:30
parent 4bf6c1e2f7
commit 9c5da1c6e3
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
server/src/com/cloud/acl/DomainChecker.java
View File

@ -110,7 +110,10 @@ public class DomainChecker extends AdapterBase implements SecurityChecker {
// Domain admin and regular user can delete/modify only templates created by them
if (accessType != null && accessType == AccessType.ModifyEntry) {
if (!BaseCmd.isRootAdmin(caller.getType()) && owner.getId() != caller.getId()) {
throw new PermissionDeniedException("Domain Admin and regular users can modify only their own Public templates");
// For projects check if the caller account can access the project account
if (owner.getType() != Account.ACCOUNT_TYPE_PROJECT || !(_projectMgr.canAccessProjectAccount(caller, owner.getId()))) {
throw new PermissionDeniedException("Domain Admin and regular users can modify only their own Public templates");
}
}
}
}