added admin caller check

Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>

Author: shwstppr

server/src/main/java/org/apache/cloudstack/ingestion/VmIngestionManagerImpl.java

@@ -60,6 +60,7 @@
 import com.cloud.dc.dao.DataCenterDao;
 import com.cloud.exception.InsufficientCapacityException;
 import com.cloud.exception.InvalidParameterValueException;
+import com.cloud.exception.PermissionDeniedException;
 import com.cloud.host.Host;
 import com.cloud.host.HostVO;
 import com.cloud.host.Status;
@@ -143,6 +144,10 @@ public VmIngestionManagerImpl() {
 
     @Override
     public ListResponse<UnmanagedInstanceResponse> listUnmanagedInstances(ListUnmanagedInstancesCmd cmd) {
+        final Account caller = CallContext.current().getCallingAccount();
+        if (caller.getType() != Account.ACCOUNT_TYPE_ADMIN) {
+            throw new PermissionDeniedException(String.format("Cannot perform this operation, Calling account is not root admin: %s", caller.getUuid()));
+        }
         final Long clusterId = cmd.getClusterId();
         if (clusterId == null) {
             throw new InvalidParameterValueException(String.format("Cluster ID cannot be null!"));
@@ -236,6 +241,10 @@ public ListResponse<UnmanagedInstanceResponse> listUnmanagedInstances(ListUnmana
 
     @Override
     public UserVmResponse importUnmanagedInstance(ImportUnmanageInstanceCmd cmd) {
+        final Account caller = CallContext.current().getCallingAccount();
+        if (caller.getType() != Account.ACCOUNT_TYPE_ADMIN) {
+            throw new PermissionDeniedException(String.format("Cannot perform this operation, Calling account is not root admin: %s", caller.getUuid()));
+        }
         final Long clusterId = cmd.getClusterId();
         if (clusterId == null) {
             throw new InvalidParameterValueException(String.format("Cluster ID cannot be null!"));
@@ -252,7 +261,6 @@ public UserVmResponse importUnmanagedInstance(ImportUnmanageInstanceCmd cmd) {
         if (Strings.isNullOrEmpty(instanceName)) {
             throw new InvalidParameterValueException(String.format("Instance name cannot be empty!"));
         }
-        final Account caller = CallContext.current().getCallingAccount();
         final Account owner = accountService.getActiveAccountById(cmd.getEntityOwnerId());
 
         Long userId = null;