cloudstack/server
Prachi Damle 2e5b529157 CLOUDSTACK-6560: IAM - Admin user is denied permission to create Egress rule for a user's network
Changes:
- CS 4.3 handled Network entity in two ways:
a) Specified "UseNetwork" access and did a strict check w.r.t who can use this network. Regular users and Domain Admin went through the strict check. Root admin got access always.
b) Specified "null" access and that meant admins can access this network for the calling API that passes null access.

- Fixing CS 4.4 IAM to handle this behavior:
a) "UseNetwork" is mapped to "UseEntry" and IAM check will be done only for domain admin and regular users when this access is specified. Root Admin is grated access.
b) If "null" access is specified, root and domain admin both are granted access. Regular users still go through IAM.
2014-05-01 16:07:52 -07:00
..
conf Summary: Updated sudoers approved commands for cloud user 2013-10-23 13:42:16 -07:00
resources Adding SecurityChecker list for the ParamProcessWorker 2014-04-01 12:06:16 -07:00
scripts License header updates for the server folder. 2012-08-03 09:41:27 -04:00
src CLOUDSTACK-6560: IAM - Admin user is denied permission to create Egress rule for a user's network 2014-05-01 16:07:52 -07:00
test CLOUDSTACK-6513: Optimize code by removing deprecated utility to 2014-04-29 18:33:10 -07:00
pom.xml Removed all reminants of the IdentityService. Created the KeysManager to move the management 2014-01-14 13:11:35 -08:00