One of my users sent me a screenshot of a task activity on a virtual machine in a different virtual datacenter. The only problem is that she should have NO ACCESS to objects in other virtual datacenters, and vice versa. I double checked our permissions to the datacenter in question, and I see no way that she has been assigned explicit permissions. What could possibly be the problem, is that we implemented KB 1008192 in order to resolve a problem with our tenants cloning VMs. KB 1008192 requires that we assign permissions at the vCenter level for all users for Virtual Machine > Provisioning > Read Customization Specifications and Modify Customization Specifications. The permissions are set to NOT PROPAGATE as described in the KB (if they do propagate, ALL users will be able to see ALL datacenters). Has anyone encountered this kind of "permissions leak" before?
↧