apache / cloudstack

Apache CloudStack is an opensource Infrastructure as a Service (IaaS) cloud computing platform
https://cloudstack.apache.org/
Apache License 2.0
2.12k stars 1.11k forks source link

Add snapshots-related limits returned in capabilties #3035

Open bwsw opened 6 years ago

bwsw commented 6 years ago
ISSUE TYPE
COMPONENT NAME
API
CLOUDSTACK VERSION
4.12
CONFIGURATION
OS / ENVIRONMENT
SUMMARY

Add VM snapshots and disk snapshots configured limitations in response for listCapabilties.

We propose adding snapshots-related capabilities for disk snapshots and VM snapshots because these capabilities limit the use of snapshots and thus must be disclosed to users. As these limits are cloud-wide, not user-specific they must be disclosed to users with listCapabilities.

Without the disclosure users (especially regular users in multi-tenant environments) can not understand the outcomes of operations when they exceed limits before the configuration command for snapshotting is sent to the server.

The disclosure for these pararmeters doesn't lead to a security problems as all of them can be deducted by users in an empirical way.

When client application knows them better interfaces can be created:

We propose these features because would like to address them in the next versions of CloudStack-UI software.

What to disclose:

STEPS TO REPRODUCE
EXPECTED RESULTS
New capabilities elements returned in API.
DaanHoogland commented 6 years ago

added comments in the PR. I'd like to see how this is useful in the UI or in a script.

DaanHoogland commented 4 years ago

@bwsw is still ongoing?

nvazquez commented 3 years ago

Marking as unplanned as the PR has been inactive for more than a year