对接多个vmware,每个项目管理一个vmware,项目管理员创建虚拟机的时候，可以选择其他项目下面云账号的系统镜像，而且选择其他项目镜像，可以直接在其他项目管理的资源下面创建虚拟机

[jinteng123]

版本 3.11

[ioito]

麻烦截图下项目管理员的权限信息

[jinteng123]

麻烦截图下项目管理员的权限信息

[ioito]

目前服务会默认添加云订阅及镜像的权限，可以移除以下代码重新编译region镜像替换服务试下

cloudpods/pkg/compute/policy/defaults.go

Lines 64 to 75 in dd49b1e

	{
	Service: api.SERVICE_TYPE,
	Resource: "cachedimages",
	Action: PolicyActionList,
	Result: rbacutils.Allow,
	},
	{
	Service: api.SERVICE_TYPE,
	Resource: "cachedimages",
	Action: PolicyActionGet,
	Result: rbacutils.Allow,
	},

cloudpods/pkg/compute/policy/defaults.go

Lines 215 to 238 in dd49b1e

	{
	Service: api.SERVICE_TYPE,
	Resource: "cloudaccounts",
	Action: PolicyActionList,
	Result: rbacutils.Allow,
	},
	{
	Service: api.SERVICE_TYPE,
	Resource: "cloudaccounts",
	Action: PolicyActionGet,
	Result: rbacutils.Allow,
	},
	{
	Service: api.SERVICE_TYPE,
	Resource: "cloudproviders",
	Action: PolicyActionList,
	Result: rbacutils.Allow,
	},
	{
	Service: api.SERVICE_TYPE,
	Resource: "cloudproviders",
	Action: PolicyActionGet,
	Result: rbacutils.Allow,
	},