[ https://issues.apache.org/jira/browse/CLOUDSTACK-10434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
lujie updated CLOUDSTACK-10434: ------------------------------- Issue Type: Bug (was: New Feature) > some APIs in VolumeApiServiceImpl need access check > --------------------------------------------------- > > Key: CLOUDSTACK-10434 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10434 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Reporter: lujie > Priority: Major > > I think some APIs in VolumeApiServiceImpl lack access check. I will list > them in below table. Anyone chould change this table. If you think the APIs > do not need access check, change its lable as "no". > ||API||Lack?|| > |updateVolume|yes| > |detachVolumeViaDestroyVM|yes| > |takeSnapshot|yes| > |migrateVolume|yes| -- This message was sent by Atlassian Jira (v8.3.4#803005)