41e5e38fef
bug 9336: securityGroups can be used by other securityGroups in the same domain only; no cross domain SG authentication
...
status 9336: resolved fixed
Following changes were made:
* deleteSecurityGroup/authorizeSecurityGroupIngress - removed account/domainId parameters as SG is uniquely identified by id now
* removed account_name field from securityGroup DB table; removed allowed_security_group/allowed_sec_grp_acct from security_ingress_rule.
These values were used for api response generation only for performance purposes; added caching on API level to improve performance
* Added missing security checks for securityGroups/ingressRules
2011-04-22 11:35:29 -07:00
92155522f2
Add license header to files
2011-04-14 11:23:14 -07:00
075fba5899
stackmaid is now taskmanager
2011-04-05 10:17:22 -07:00
d78cea1cea
fix merge conflicts
2011-02-15 17:08:01 -08:00
43c82d03d8
UTF-8 fix - make encoding work across GET/POST
2011-02-15 17:06:29 -08:00
a05400604b
bug 8565: throw unsupported error code when non existing api command is sent
...
status 8565: resolved fixed
2011-02-15 16:01:09 -08:00
a0c48d7fa1
1) Rename console-common to console so that Eclipse project name is the same as folder name
...
2) Fix UTF encoding issue at servlet response
2011-02-15 10:04:06 -08:00
c89ad5ae7b
bug 8485: Merge from 2.2.x. Fixed ClassCastException with returning the login response in xml format
2011-02-08 15:22:40 -08:00
ee923e5797
Added HTTP Header 'X-Description' to API error responses.
...
For easy access to API error descriptions in the CloudBridge.
2011-01-11 18:27:03 +00:00
a013640180
Bugfix: Do not URL-decode API parameters twice.
...
There's no need to call ApiServer's handleRequest with decode=true
since Tomcat has already url-decoded the parameters. URL-decoding
twice breaks all Base64 encoded data such as userData in deployVM,
since %2b decodes to ' ', not '+' as it should.
2011-01-06 14:25:59 +00:00
5743db87e1
bug 5482: build Error api response based on responseType(xml, json) specified in the request instead of using default HttpServlet error response format
...
status 5482: resolved fixed
2011-01-04 15:08:12 -08:00
544fa7ff1b
remote access vpn, user ip address changes
2010-12-29 09:32:54 -08:00
8ea2959f71
sending back a account_error errorcode for trying to log into a locked account. also, changing the domainId to domainname for this error
2010-12-08 16:11:16 -08:00
54f177cacc
1) Make generic dao be able to persist UTF-8 string for internationalization support
...
2) Undo gson Unicode escape in API response object to avoid double escaping which can break Javascript from getting correct text content
3) Correct API layer in dealing with character encoding
4) Remove double escape in cloud.core.js
2010-11-30 09:40:54 -08:00
aa8aa6027a
Modified UserContext - got rid of accountName, domainId fields as we can get this information from Account field.
2010-11-24 14:29:08 -08:00
138e0914b6
bug 7245: don't try to set vm name for detached volume during expunge process.
...
status 7245: resolved fixed
Fixed couple of other problems:
* cleanup corresponding records in load_balancer_vm_map table when loadBalancerRule is removed.
* don't log "java.lang.IllegalStateException: getAttribute: Session already invalidated" exception when UI session expires
2010-11-19 20:08:18 -08:00
91a87f9d8f
bug 7155: fixed NPE in AuditTrial which used to happen when logout command was executed when session was already invalidated.
...
status 7155: resolved fixed
2010-11-17 21:42:51 -08:00
10cfe07970
bug 6793: returning the right msg to the ui when we try to log in to a locked account
2010-11-16 14:15:08 -08:00
92e3dc91c4
found a bug in the code where we were not decoding the params sent in eg. "a b" was being stored in the db as 'a%20b'. Fixing the same to have the right val persisted to the db
2010-11-16 11:46:55 -08:00
fc461abed1
bug 6755: adding checks for commands before they hit the ms; to ensure they are valid. Also returning the right error msg if the command is not valid
...
status 6755: resolved fixed
2010-11-12 13:55:06 -08:00
6e0b500a83
bug 4964: made listDomainChildren work with "isRecursive" flag
...
status 4964: resolved fixed
2010-11-11 14:32:36 -08:00
d5d8f27cad
Added more changes to the api
2010-10-21 15:11:49 -07:00
f4f00cbe2d
bug 6655: when verifying request signature for API requests that use keys, pass the userId of the requester as a Long to avoid NPEs when converting it to a string. Also set up the UserContext for both normal users and admins.
...
status 6655: resolved fixed
2010-10-19 11:41:09 -07:00
5960911511
Fix processing of session parameters in logout case
2010-10-12 19:42:53 -07:00
2740ba6c40
final merge of master->2.1.refactor preparing for merge back into master
2010-10-12 14:46:24 -07:00
f7f2b5666a
bug 5871: removing the NDC since there is no nested context involved in the audit trail and since its leaking into the management server logs.
2010-10-05 19:51:12 +05:30
38fd80e522
bug 5871: Introducing audit trail for all the interactions with the cloud stack - User 'X' initiated an action 'Y' on resource 'Z'. The audit will contain http api request along with the contextual parameters (userId, accountId, sessionId). For the response part only log success/failure for all sync api's with the exception of queryAsyncJob where reason code and reason will also be logged. For async api's I will also log the async job id.
2010-10-04 14:27:40 +05:30
bc2449a69a
If the session in invalidated due to a bad session key, just return to avoid the situation where the session is invalidated twice (which causes IllegalStateException)
2010-09-30 11:39:36 -07:00
0105aec338
Always set the response type on the command object so that the correct output is generated. Add both Strings and Longs to the login response (domainId and userId will be the Longs). Use the correct method name for ListSystemVMsCmd.
2010-09-29 17:32:19 -07:00
da660f2575
Change session parameters to be their actual type (domainId and userId are saved to the session as Longs and not Strings)
2010-09-29 15:18:43 -07:00
a8112f65de
When using session based authentication, we now store the parameters in the session as part of the login processing, instead of returning those parameters so that the caller has to update the session. Authentication now throws an exception on failure and the caught exception is where the session is invalidated.
2010-09-13 17:04:11 -07:00
df10af0688
cleaning up imports, fixing up some compilation problems related to API refactoring
2010-09-13 15:25:46 -07:00
449d1f3acf
working through some compilation errors that have arisen due to all the API refactoring...
2010-09-13 14:46:23 -07:00
ac730ec496
Branch 2.1.refactor committed
2010-08-11 09:13:42 -07:00
05c020e1f6
Source code committed
2010-08-11 09:13:29 -07:00
alena
Frank
Alex Huang
Kelven Yang
will
Ragnar B. Johannsson
abhishek
Kris McQueen
nit
Manuel Amador (Rudd-O)