Description of problem: Cloud volumes do not fall under the restriction of cloud tenants. The user can perform any CRUD-operations on the cloud volumes in any cloud tenant not only in users own. Moreover, when you deploy cloud instances (Lifecycle->Provisioning) and choose an additional volume to provision it provisioned in any cloud tenant (Likely to be selected first.) other than the tenant of provisioned instance. Version-Release number of selected component (if applicable): [root@srv-os-cfme02 vmdb]# cat VERSION 5.7.2.1 RHOSP 10 (Newton) How reproducible: Steps to Reproduce: 1. Add OpenStack Cloud Provider keystone v3 with cloud tenant sync. 2. Create projects for diffirent users groups in OpenStack. 3. Add users groups to CFME and assign cfme tenants to them. 4. Start provisioning cloud instance with additional volume (Lifecycle->Provisioning) Actual results: Cloud volume provisioned in any cloud tenant (likely to be selected first) other than the tenant of provisioned instance. Expected results: Cloud volume provisioned in the same cloud tenant as the tenant of provisioned instance. And :volumes options hash have placement option for cloud tenant selection. Additional info:
https://github.com/ManageIQ/manageiq-providers-openstack/pull/33
Verified ======== 5.9.0.20