GitHub user rohityadavcloud edited a comment on the discussion: Get Rid of Account "Types"? and just use "Roles"?
Good ideas and discussion. However, due to maintaining backward compatibility and supporting both static and dynamic role checkers, it's not possible to remove support for account types and therefore breaking support for static role checker (that used to use commands.properties) and several APIs that still rely on account type parameter. The dynamic roles feature (https://cwiki.apache.org/confluence/display/CLOUDSTACK/Dynamic+Role+Based+API+Access+Checker+for+CloudStack) was introduced to provide more flexibility on the static account type based checker (and seem to be surpassed the use/support for static account-type based checker). That said, it's not impossible to remove and deprecate the account type feature; but that would require hundreds if not thousands of hours of effort to plumb the codebase and create a gradual plan of deprecating the feature & break/rework APIs. The big question is - who's going to do it, or who's gonna support/sponsor that, and what scale of benefit would such an exercise achieve? GitHub link: https://github.com/apache/cloudstack/discussions/10380#discussioncomment-14176718 ---- This is an automatically sent email for users@cloudstack.apache.org. To unsubscribe, please send an email to: users-unsubscr...@cloudstack.apache.org
