You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
A regular user cannot dettach disk or nic from a vm. They should be able to dettach any disk or nic from a vm:
To Reproduce
Instantiate a vm as a regular user
Attach a disk
User cannot dettach the disk
Expected behavior
That an user can attach and dettach a disk or nic without restrictions, no matter if a restricted attribute exists.
Details
Affected Component: Sunstone
Hypervisor: N/A
Version: 6.10.0
** Additional context **
The previous behavior it's only for vm instances. For vm templates, we need to improve the checking with the following rules:
Iif the following restricted attributes exists in oned.conf:
VM_RESTRICTED_ATTR = "DISK/TOTAL_BYTES_SEC"
And the vm template has a value for this attribute (e.g. TOTAL_BYTES_SEC=20") the dettach option should be disabled. But if the vm template has not any value for this attribute (e.g. the attribute doesn't exist in the template) the dettach option should be enabled.
Same behavior in NIC, PCI and schedule actions.
Progress Status
Code committed
Testing - QA
Documentation (Release notes - resolved issues, compatibility, known issues)
The text was updated successfully, but these errors were encountered:
Description
A regular user cannot dettach disk or nic from a vm. They should be able to dettach any disk or nic from a vm:
To Reproduce
Expected behavior
That an user can attach and dettach a disk or nic without restrictions, no matter if a restricted attribute exists.
Details
** Additional context **
The previous behavior it's only for vm instances. For vm templates, we need to improve the checking with the following rules:
Iif the following restricted attributes exists in oned.conf:
VM_RESTRICTED_ATTR = "DISK/TOTAL_BYTES_SEC"
And the vm template has a value for this attribute (e.g. TOTAL_BYTES_SEC=20") the dettach option should be disabled. But if the vm template has not any value for this attribute (e.g. the attribute doesn't exist in the template) the dettach option should be enabled.
Same behavior in NIC, PCI and schedule actions.
Progress Status
The text was updated successfully, but these errors were encountered: