diff --git a/services/iam/plugin/src/org/apache/cloudstack/iam/IAMApiServiceImpl.java b/services/iam/plugin/src/org/apache/cloudstack/iam/IAMApiServiceImpl.java index 5d35ee27943..55910f71106 100644 --- a/services/iam/plugin/src/org/apache/cloudstack/iam/IAMApiServiceImpl.java +++ b/services/iam/plugin/src/org/apache/cloudstack/iam/IAMApiServiceImpl.java @@ -516,7 +516,7 @@ public class IAMApiServiceImpl extends ManagerBase implements IAMApiService, Man } else { accessType = AccessType.UseEntry; } - } else if (!(BaseAsyncCreateCmd.class.isAssignableFrom(cmdClass))) { + } else { accessType = AccessType.OperateEntry; } String accessTypeStr = (accessType != null) ? accessType.toString() : null; diff --git a/services/iam/plugin/src/org/apache/cloudstack/iam/RoleBasedAPIAccessChecker.java b/services/iam/plugin/src/org/apache/cloudstack/iam/RoleBasedAPIAccessChecker.java index b7f672c87ff..c5e84d1294d 100644 --- a/services/iam/plugin/src/org/apache/cloudstack/iam/RoleBasedAPIAccessChecker.java +++ b/services/iam/plugin/src/org/apache/cloudstack/iam/RoleBasedAPIAccessChecker.java @@ -252,7 +252,7 @@ public class RoleBasedAPIAccessChecker extends AdapterBase implements APIChecker accessType = AccessType.ListEntry; addAccountScopedUseEntry = true; } - } else if (!(cmdObj instanceof BaseAsyncCreateCmd)) { + } else { accessType = AccessType.OperateEntry; } } catch (Exception e) {