mirror of https://github.com/apache/cloudstack.git
000ee36224
Ran into an issue today where we passed both the "id" and "domainid" parameters into "listAccounts" and received a response despite the account id passed not belonging to the domainid passed.
Allow usage of "domainid" AND "id" in "listAccounts"
- Adding "AccountDoa::findActiveAccountById"
- Adding "AccountDaoImpl::findActiveAccountById"
- Removing seemingly pointless "listForDomain" parameter
- Updating "typeNEQ" value from "5" to "Account.ACCOUNT_TYPE_PROJECT"
(which is "5")
- Only attempt to load domain for "path" query parameter once
"searchForAccountsInternal" input validation logic pseudo-code:
- If "domainid" set, check immediately
- If "id" not set:
- and user is admin and "listall" is true
- if "domainid" not set, use caller domain id
- force "isrecursive" true
- else use caller account id
- Else if "domainid" and "name" set
- verify existence of account and that user has access
- Else:
- if "domainid" not set, locate account by "id"
- else, locate account by "id" and "domainid"
- verify account found and caller has access rights
|
||
|---|---|---|
| .. | ||
| alert | ||
| capacity | ||
| certificate | ||
| cluster/agentlb | ||
| configuration | ||
| dc | ||
| domain | ||
| event | ||
| gpu | ||
| host | ||
| hypervisor | ||
| network | ||
| offerings | ||
| projects | ||
| secstorage | ||
| service | ||
| storage | ||
| tags | ||
| upgrade | ||
| usage | ||
| user | ||
| vm | ||