rohityadavcloud commented on pull request #6156: URL: https://github.com/apache/cloudstack/pull/6156#issuecomment-1077389362
@Pearl1594 I think the update API shouldn't be allowed to switch an account to a role that is incompatible with the account type. For example, if it's allowed to update a normal user account's role to a root admin role, that shouldn't be allowed. That means the UI/client should filter and allow only roles of matching types, and/or in the backend this must be checked. (this is assuming that updateAccount doesn't explicitly allows updating the account type) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
