Templates owned by Project Account not allowed to share templates

[damonb123]

ISSUE TYPE

• Bug Report

COMPONENT NAME

API

CLOUDSTACK VERSION

4.17.1.0
4.17.2.0

public boolean updateTemplateOrIsoPermissions(BaseUpdateTemplateOrIsoPermissionsCmd cmd) {

      <...>

        if (owner.getType() == Account.Type.PROJECT) {
            // Currently project owned templates cannot be shared outside project but is available to all users within project by default.
            throw new InvalidParameterValueException("Update template permissions is an invalid operation on template " + template.getName() +
                    ". Project owned templates cannot be shared outside template.");
        }

      <...>

SUMMARY

Templates owned by a project account are not allowed to exectute updateTemplatePermissions API.
This prevents projects from sharing templates between them selves that are in the same Domain as stated by the API docs.
It seems to indicate that only templates created by a users in the "admin" or other non-project group are allowed to mark templates shared outside of the project structure.

EXPECTED RESULTS

Allowing users in the same domain to share templates would seem to be an expected behavior.

[kiranchavala]

Hi @damonb123

Could you please let me know what's role typer of the account

1. The account type you created (domain-admin , user, etc)

2. What is the project role type you selected , when adding account to the project

[shwstppr]

@weizhouapache @rohityadavcloud @harikrishna-patnala does it make sense to allow ROOT admin to change the owner of the templates using updateTemplate API?
Or should we allow project-owned templates to be shared outside the project?

[yadvr]

This is by design, template registered in a project are owned by it so not accessible to others. However, like any account they should be allowed to be shared to others.