topic Re: 5.5 Download permission? in VMware vCloud Director Discussions

5.5 Download permission?

Cronistar — Wed, 23 Oct 2013 03:28:54 GMT

Is it possible to restrict the ability to download a vApp as an OVF? In our environment, we can't allow the machines to leave our contained VCD environment, but it doesn't seem that it's possible to prevent users from being able to download catalog items they have Read access to.

Re: 5.5 Download permission?

abhilashhb — Wed, 23 Oct 2013 06:36:05 GMT

Do you want to restrict your users from deploying vApp from OVF? Correct me if i got it wrong.

Re: 5.5 Download permission?

Cronistar — Wed, 23 Oct 2013 14:39:30 GMT

Opposite actually . Users can export a vApp from the vCloud UI to an OVF onto their desktops. I'm trying to find a way to restrict users from doing this.

Re: 5.5 Download permission?

cfor — Wed, 23 Oct 2013 14:44:01 GMT

Under role rights some right exist around this... I have not tested in VCD 5.5 to see if the behavior has changed. But in VCD 5.1 under "All Rights":"Catalog Item" you can "Enable vAppTemplate/Media Download"

Have you check to see if this right cascades down to the direct vApp, (not sure if VMware missed this one or just joined the right)

Re: 5.5 Download permission?

Cronistar — Wed, 23 Oct 2013 15:13:38 GMT

Just checked to make sure, but the permission doesn't seem to cascade. You can restrict a user from downloading a vApp Template, but they can get around the restriction by just instantiating the vApp and downloading it from the My Cloud tab.

Re: 5.5 Download permission?

cfor — Wed, 23 Oct 2013 20:47:20 GMT

I have tested - yep we have same problem. I opened a support case with VMware on this. Might be worth doing it yourself. (They should see my case, but if not suggest they link them to speed a solution up)

Re: 5.5 Download permission?

Cronistar — Thu, 24 Oct 2013 04:27:43 GMT

Confirmation feels good!

I opened a case too, hopefully we'll see a quick fix!

Re: 5.5 Download permission?

brianoc — Fri, 28 Feb 2014 10:12:52 GMT

Hi Cronistar. Were you able to get a resolution from support on this? I would like to do the same in my environment!

Re: 5.5 Download permission?

Cronistar — Fri, 28 Feb 2014 14:58:27 GMT

Unfortunately, no. They said they're putting it on the bug list and hope it'll make it to the next release.

In the meantime, there wasn't any fix available, so we're just living with it crossing our fingers.

Re: 5.5 Download permission?

brianoc — Fri, 28 Feb 2014 15:01:46 GMT

Ah well! Thanks for letting me know.