Public templates from other domains inaccessible

[shwstppr]

ISSUE TYPE

• Bug Report

COMPONENT NAME

API, server

CLOUDSTACK VERSION

>= 4.17.0.0

CONFIGURATION

N/A

OS / ENVIRONMENT

N/A

SUMMARY

Public templates registered in one domain are not accessible for users of other domain (for listing template details, deploying vm). Same operation works okay in 4.16.1 env

STEPS TO REPRODUCE

Create 2 domains and create one user account in each
For each domain, set configuration - share.public.templates.with.other.domains
Using user of domain-1, register a new public template, template-1
Using  user of domain-2, try listing all available templates - template-1 shows in the list
Using  user of domain-2, try listing template-1 template - failure seen like, Error: (HTTP 531, error code 4365) Account [{"accountName":"dom2user","id":8,"uuid":"7ea0d4d5-2f8c-4cc4-afec-358223f43674"}]is not allowed to access the template Template
Using  user of domain-2, try deploying a VM with template-1 template - failure seen like, Error: (HTTP 531, error code 4365) Account [{"accountName":"dom2user","id":8,"uuid":"7ea0d4d5-2f8c-4cc4-afec-358223f43674"}]is not allowed to access the template Template {"format":"OVA","id":205,"uniqueName":"205-7-3fc802fd-55b4-3ca0-8a78-00c95331544a"}

EXPECTED RESULTS

Template details can be listed and VM using it can be deployed

ACTUAL RESULTS

Template can't be accessed correctly and error is seen,
Error: (HTTP 531, error code 4365) Account [{"accountName":"dom2user","id":8,"uuid":"7ea0d4d5-2f8c-4cc4-afec-358223f43674"}]is not allowed to access the template Template {"format":"OVA","id":205,"uniqueName":"205-7-3fc802fd-55b4-3ca0-8a78-00c95331544a"}

4.17.0-test.log
4.16.1-test.log

[yadvr]

Was there any historic reason, or was this working in older say 4.9-4.15 versions?

[shwstppr]

@rohityadavcloud I've not checked 4.9-4.15 but the operation was working in 4.16.1 and not working in 4.17.0 or above

[yadvr]

Thanks @shwstppr (I missed the it works on 4.16.1) that's clearly a regression for 4.17.0 :)

[DaanHoogland]

did #6916 solve this @shwstppr ? (please double check this can be closed indeed)