Commit Graph

117 Commits

Author SHA1 Message Date
alena 0cdb67fdc7 bug 11167: no need to lock account when create security group to ensure that the group name is unique for account. If group already exists in the db, and we try to persist it again, mysql constraint (groupName, accountId) will fail and exception will be thrown.
status 11167: resolved fixed
2011-08-18 10:16:20 -07:00
alena 8d47c53735 Revert "bug 10435: removed vpn feature"
This reverts commit ea9e1b5d138950e8de49fce7ffdbb12a1c72c560.

Conflicts:

	api/src/com/cloud/api/ResponseGenerator.java
	scripts/vm/hypervisor/xenserver/vmops
	server/src/com/cloud/configuration/Config.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
	server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
2011-08-02 18:12:57 -07:00
Nitin 63205f1f02 bug 10868: CheckAccess - If the domainId = -1 and the accountId is still valid then try and calculate the domainId. This case will be hit for all the entities which do not have domain id column in the DB table. What was happenning due to this was that we were not checking the domain hierarchy in such case which was leading to security leaks. Example - templates. 2011-07-28 17:11:14 +05:30
kishan 6b4c61a348 bug 10382: Move volume delete events to destroyVolume method
status 10382: resolved fixed
2011-07-20 11:22:31 +05:30
kishan 427b73a2b9 bug 10372: Added Vm State Machine listener for usage events
status 10372: resolved fixed
2011-07-20 11:13:56 +05:30
alena 5be1f94c0d bug 9620: fixed updateUser api to make updates only for the fields that are specified in the request
status 9620: resolved fixed
2011-07-19 11:10:52 -07:00
alena 8b100f7c4d bug 10409: added domainSuffix parameters to account/domain objects
Conflicts:

	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/upgrade/dao/Upgrade228to229.java
	server/src/com/cloud/user/AccountManagerImpl.java
	setup/db/db/schema-228to229.sql
2011-07-19 11:10:52 -07:00
alena ca87603925 Throw correct types of exceptions when fail to create account 2011-07-19 10:33:34 -07:00
kishan 427b70e572 bug 10276: Throw exception for account APIs failure
status 10276: resolved fixed
2011-07-19 18:38:54 +05:30
alena 0d84cde633 bug 10409: added domainSuffix parameters to account/domain objects 2011-07-15 14:40:39 -07:00
alena 21afc889d0 bug 10438: always return success on disableAccount when it got disabled successfully in the DB. If his vms failed to stop on the backend, mark account for cleanup and let background thread to do the cleanup job
status 10438: resolved fixed
2011-07-15 14:27:58 -07:00
alena 73574ebf5b Do regular vm stop (not forced=true) when disableAccount 2011-07-11 17:35:35 -07:00
alena 74f34a0e0c bug 10435: removed vpn feature
status 10435: resolved fixed
2011-06-24 09:18:46 -07:00
Edison Su 54a4af2a0c bug 10092: fix the Long compare
status 10092: resolved fixed
2011-06-21 14:33:43 -04:00
alena 57e4af6fd5 bug 10325: renamed apiKey/secretKey to userApiKey/userSecretKey in updateUser api call
This reverts commit 927508215de383bdcc5b2e289e5103e011d72843.
2011-06-16 11:47:54 -07:00
Murali Reddy 00bd79ffee bug 9419: implement api to reset resource count
adding couple of fixes
2011-06-16 19:01:03 +05:30
Murali Reddy c7e347e9a4 bug 9419: implement api to reset resource count 2011-06-16 19:00:42 +05:30
Murali Reddy aa4f654929 bug 9419: implement api to reset resource count
added a command to reset resource count for account/domain based on real usage of resources
2011-06-16 18:59:38 +05:30
alena cab765f85e Fixed the bug in updateUser api - api/secretKey update didn't work correctly when request was signed using apiKey 2011-06-15 15:02:07 -07:00
alena 8948c3dd84 1) listNetworks for domain level network case: fixed search to do multiple joins between the tables instead of querying all the data and making search for each entry.
2) Added new config parameter 'allow.subdomain.network.access' - default value is true. If it's set to false, the child domain can't use the network of the parent domain

Conflicts:

	server/src/com/cloud/network/NetworkManagerImpl.java
2011-06-08 12:00:19 -07:00
will 5913c5a441 Added an acknowledge process for the registration complete process of cloudzones. Only after a expires=true will the token be truly expired. 2011-06-06 11:47:59 -07:00
Alex Huang d9e0bcfa1e bug 10126: Renamed getPodId() to getPodIdToDeployIn() 2011-06-03 22:17:08 -07:00
Murali Reddy 6de2bef7cd bug 9973: listReourceLimits A domain-admin of domain X can view Resource Limits from other domain
adding additional checks, and moving old code to access checkers
status 9973: resolved fixed
2011-05-31 14:00:27 +05:30
will fef2c58996 bug 9982: Ensuring that the registration token is used only once. 2011-05-25 16:06:49 -07:00
alena b5aabfab75 bug 9898: fixed attachIso by domain admin - no need to make permission check when iso is public
status 9898: resolved fixed
2011-05-17 11:11:13 -07:00
Chiradeep Vittal 936893e70a zonesfeature merge: no idea where this system.out came from 2011-05-03 10:41:31 -07:00
Chiradeep Vittal 303e2a7481 Start of zonesfeature / mycloud/cloudkit 2011-05-03 10:40:17 -07:00
Alex Huang 99bc15f64a changed getName to getHostname 2011-04-29 08:34:10 -07:00
will 633d024b7c - Merge all CloudZones Registration feature into master 2011-04-28 16:05:36 -07:00
alena 1a6d78eae4 Code cleanup. No need to declare runtime exceptions (CloudRuntimeException, InvalidParameterException, PermissionDenied exceptions) 2011-04-21 16:26:53 -07:00
alena 52fe53f497 bug 9458: do searchIncludingRemoved when decrement resource count as corresponding domain might be removed already
status 9458: resolved fixed

Conflicts:

	server/src/com/cloud/user/AccountManagerImpl.java
2011-04-14 15:39:51 -07:00
nit 7d51bf41b6 bug 8710: Attaching resource domain account to a zone code 2011-04-12 18:22:26 +05:30
nit debe236a8d bug 8710: CONTD....Introducing a new user role in cloudstack called RESOURCE_DOMAIN_ADMIN. The role would have all the domain_admin rights and the rights to list zone,pods,clusters and so on. More info in the bug 2011-04-11 19:40:37 +05:30
Murali Reddy 290c799b2c Bug 9273 : [Stress Test] 'Count' in resource_count table has negative values
pushing 2.2.4 changes in to master
2011-04-11 15:37:53 +05:30
Murali Reddy 598503f094 bug 9129:can't create vm if an instance limit is set at root domain
pushing 2.2.4 fixes
2011-04-08 13:25:51 +05:30
prachi 923f562aa8 Bug 6873: disable/enable mode for clusters (and pods and zones and hosts)
- Added a new flag 'allocation_state' to zone,pod,cluster and host
- The possible values for this flag are 'Enabled' or 'Disabled'
- When a new zone,pod,cluster or host is added, allocation_state is 'Disabled' by default.
- For existing zone,pod,cluster or host, the state is 'Enabled'.
- All Add/Update/List  commands for each of zone,pod,cluster or host can now take a new parameter 'allocationstate'
- If 'allocation_state' is 'Disabled', Allocators skip that zone or pod or cluster or pod.
- For a root admin, ListZones lists all zones including the 'Disabled' zones. But for any other user, the 'Disabled' zones are not included in the response.
- For any usecase that creates/deploys/adds/registers a resource and takes in zone as parameter, now we check if the Zone is 'Disabled'. If yes then the operation cannot be performed by a user other than root-admin. Add volume, snapshot, templates are examples of this usecase.
- To enable the root admin to test a particular pod/cluster/host, deployVM command takes in 'host_id' parameter that can be passed in only by root admin.
If this parameter is passed in by the admin, allocators do not search for hosts and use that host only. StoragePools are searched in the cluster of that host.
If VM cannot be deployed to that host, allocators and deployVM fails without retrying
2011-03-23 22:15:35 -07:00
alena 5129df106b bug 8847: createUser api - "account" parameter is required now
status 8847: resolved fixed
2011-03-09 10:21:50 -08:00
kishan db7a0ddb75 bug 8672: Added action events for User commands
status 8672: resolved fixed
2011-03-04 16:45:49 +05:30
alena a8e70cf9b4 bug 8763: Fixed account cleanup process - don't destroy networks when vm expunge failed
status 8763: resolved fixed

Conflicts:

	server/src/com/cloud/user/AccountManagerImpl.java
2011-03-01 14:25:09 -08:00
kishan 65eaf27c5c bug 8670, 8672: Added action events for account/user actions
status 8670: resolved fixed
2011-03-01 21:19:34 +05:30
alena 62b3d548d6 bug 8753: never release public Ip address without ensuring that all corresponding resources (PF/StaticNat/Lb rules) are cleaned up.
Fixed couple of other problems along:

* when expunge PF/Static nat rules as a part of vmExpunge/IpRelease process, first mark all rules as Revoke, and then send commands to the backend. Group commands by Ip address.
Before we used to do Revoke/Send per rule basis.
* When release source nat rule, make sure that corresponding vpn (if exists) is being expunged.
2011-02-28 09:21:05 -08:00
alena 65d22a7a15 Fixed exception logging in several places 2011-02-25 09:31:21 -08:00
alena 970e0ab320 Removed unused imports 2011-02-24 19:47:25 -08:00
kishan 8eb665246e bug 7935: Included hypervisor type to vm usage records
status 7935: resolved fixed
2011-02-24 20:08:12 +05:30
alena 15f59e6f58 bug 8637: throw ResourceAllocationException when resource limit is exceeded.
status 8637: resolved fixed
2011-02-18 12:26:58 -08:00
abhishek 7aa18d4fe2 bug 8600: cleaning up remote access vpns and users as part of delete account
status 8600: resolved fixed
2011-02-18 11:11:43 -08:00
alena 96ef94eb37 ShutdownNetwork - added reservationContext parameter (contains account/callerUserId) 2011-02-17 16:13:28 -08:00
abhishek 2275d8d833 bug 8452: introducing a state for domain; blocking creation of accounts/users whilst domain is in an inactive state 2011-02-17 15:17:45 -08:00
abhishek 3d7c61bf8b bug 8452: forcing vm stop whilst disabling account
status 8452: resolved fixed
2011-02-17 13:57:04 -08:00
alena ab6ea4d6ef bug 8491: remove corresponding record from resource_limits table when limit is updated with -1 value
status 8491: resolved fixed
2011-02-08 19:08:35 -08:00