[CLOUDSTACK-3364] normal users are not allowed to edit their own iso

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 4.2.0
• Fix Version/s: 4.3.0
• Component/s: API
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Nitin Mehta
• Reporter: shweta agarwal
• Created: 04/Jul/13 12:51
• Updated: 27/Dec/13 11:16
• Resolved: 03/Dec/13 22:57

Description

Repro steps:
1.Create a domain
2.create a account under that domain
3.create a ISO as a account under the non root domain
4.Edit the ISO

BUg :
gets message:
Only ROOT admins are allowed to modify this attribute.

API:
http://10.147.38.141:8080/client/api?command=updateIsoPermissions&response=json&sessionkey=8rczMjm4sfljFOEi6dL2xT631sc%3D&id=2b8c87a0-4325-418d-80af-ce6f691edcd7&zoneid=bfdf7ac5-16c3-491e-aabd-f7ad696612b8&ispublic=false&isfeatured=false&isextractable=false&_=1372941865923

response:
{ "updateisopermissionsresponse" :

{"uuidList":[],"errorcode":431,"cserrorcode":4350,"errortext":"Only ROOT admins are allowed to modify this attribute."}

}

This may be because in case of edit ISO we show extractable and featured field as editable to normal user , which normal user is not allowed to do and api passes these as parameters

In case of template these fields are shown as non editable hence API passed does not contain isfeatured and isextractable fields

Issue Links

• is cloned by: CLOUDSTACK-5354 CLONE - UI - normal users are not allowed to edit their own iso