Switching to project view not working when user is assigned custom Project Role

Open

#14,014 opened on Aug 31, 2026 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 4/5
Estimated time: 3-5 days
Newbie friendliness: 55/100

Issue type: Bug
Clarity: Mostly clear
Activity status: Active
Tech stack: java
Domain: api, authorization

Research direction

Reproduce the failure with a custom Project Role granting "allow *", then inspect the project-view requests for listApis, listZones, and listCapabilities and compare them with Admin or Regular project membership. Check the behavior across API/UI versions 4.22.1.1 and 4.22.1.0. Done means a custom-role user can switch to project view without authorization errors and the listed requests succeed.

Written by the indexing model from the issue text.

Description

component:projects component:UI type:regression

problem

If account/user is added to the project with custom role (even if role permisions are "allow *") user can login to CS successfully but switching to project view will fail and generate multiple errors: "

The given command 'listApis' either does not exist, is not available for user. Unable to proceed. Please contact your administrator." 
The given command 'listZones' either does not exist, is not available for user. Unable to proceed. Please contact your administrator.
The given command 'listCapabilities' either does not exist, is not available for user. Unable to proceed. Please contact your administrator.
...

On browser console indeed you can see that request:
/client/api/?command=listApis&response=json&sessionkey=xxx&projectid=xxx
returns:
{"listapisresponse":{"uuidList":[],"errorcode":401,"cserrorcode":9999,"errortext":"The given command 'listApis' either does not exist, is not available for user."}}
If user is added to the project with Admin or Regular Type without any project role, switching to project view works correctly.

Switching to project view using custom Project Roles in 4.22.1.0 works correctly.
Also using UI ver. 4.22.1.1 and Api ver: 4.22.1.0 works correctly.

No additional logs available in:

cloudstack/management/apilog.log
cloudstack/management/management-server.log

versions

ACS: 4.22.1.1

The steps to reproduce the bug

Create new project "Test"
Create Project Role with "allow *" permission
Add non-admin user to project with that Project Role
Switch to Project View of "Test" project

What to do about it?

Please track the root cause and fix the bug

Dominant language: Java
Stars: 3.1k
Forks: 1.4k
Avg merge: 6d 20h
Merged PRs (30d): 27

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

executions.Query — startDate and timeRange filters are sent with inverted comparison operators Open

area/plugin

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

kestra-io/plugin-kestra#190 · Opened Sep 24, 2026
litertlm-android AAR ships no consumer ProGuard rules → "mid == null" SIGABRT in minified apps Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

google-ai-edge/LiteRT-LM#3739 · Opened Sep 24, 2026
Add canonical URLs and a sitemap Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

integra-team-red/meet-map#249 · Opened Sep 24, 2026
[Studio][Bug] Cancelled create-user dialog keeps the password and admin switch for the next attempt Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

apache/rocketmq-dashboard#5064 · Opened Sep 24, 2026
Consent portal: creating a duplicate Purpose shows a generic error instead of "already exists" Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

wso2/dpdp-accelerator#287 · Opened Sep 24, 2026

More Java issues