Add VM snapshots and disk snapshots configured limitations in response for listCapabilties.
We propose adding snapshots-related capabilities for disk snapshots and VM snapshots because these capabilities limit the use of snapshots and thus must be disclosed to users. As these limits are cloud-wide, not user-specific they must be disclosed to users with listCapabilities.
Without the disclosure users (especially regular users in multi-tenant environments) can not understand the outcomes of operations when they exceed limits before the configuration command for snapshotting is sent to the server.
The disclosure for these pararmeters doesn't lead to a security problems as all of them can be deducted by users in an empirical way.
When client application knows them better interfaces can be created:
Early configuration detection when limits are exceeded;
Better localization for errors handling because the client can handle errors before sending requests to the server and thus manage logic itself;
Better interfaces and explicit behaviors can be implemented.
We propose these features because would like to address them in the next versions of CloudStack-UI software.
What to disclose:
VM snapshots maximum amount
VM snaphost expire interval
Disk snapshots maximum hourly/daily/weekly/monthly
ISSUE TYPE
COMPONENT NAME
CLOUDSTACK VERSION
CONFIGURATION
OS / ENVIRONMENT
SUMMARY
Add VM snapshots and disk snapshots configured limitations in response for
listCapabilties
.We propose adding snapshots-related capabilities for disk snapshots and VM snapshots because these capabilities limit the use of snapshots and thus must be disclosed to users. As these limits are cloud-wide, not user-specific they must be disclosed to users with
listCapabilities
.Without the disclosure users (especially regular users in multi-tenant environments) can not understand the outcomes of operations when they exceed limits before the configuration command for snapshotting is sent to the server.
The disclosure for these pararmeters doesn't lead to a security problems as all of them can be deducted by users in an empirical way.
When client application knows them better interfaces can be created:
We propose these features because would like to address them in the next versions of CloudStack-UI software.
What to disclose:
STEPS TO REPRODUCE
EXPECTED RESULTS