Re: [Engine-devel] Managing permissions on network
On 11/13/2012 03:41 PM, Moti Asayag wrote:
On 11/13/2012 03:19 PM, Itamar Heim wrote:
> On 11/13/2012 12:45 PM, Livnat Peer wrote:
>> Interesting point, I think that if a user has permission to create a VM
>> from a specific template we should give him permission to use the
>> template networks on this VM implicitly upon the VM creation.
>
> having a permission to a template does not mean a permission to the
> default network of that VM, especially as we'll use templates more as
> instance types.
If a user is the template's owner he should be capable to modify the its
nics. I'd expect the user will modify the networks of the template only
if he has permissions for the required network.
true.
Else, a user can update the template's nics to any of
cluster's network
and to create a VM with a network the user doesn't suppose to use.
template having a default network doesn't mean user can create a vm with
that network as well, if user doesn't have a permission to that network.