Ownership transfer bypasses quota check

[Chris Post]

Transferring ownership of an existing VM appears to bypass both the RAM and disk quota checks.

Specifically, a running VM with 50 gigs disk and 512 megs RAM was transferred successfully from a group locker to a user locker where the user locker had an already running VM using around 10 gigs disk and 256 megs RAM.

[Peter Iannucci (iannucci)]

Possible resolutions include refusing to transfer ownership until the user requests a quota bump, declaring this the intended behavior, and transferring quota amounts along with the vm. The latter seems prone to abuse.

[Chris Post (ccpost)]

You could eat up arbitrary amounts of disk this way, which you would have across VM reboots. The RAM quota should get checked if any machine gets turned back on after turning off, but you could temporarily eat up all the available RAM on the hosts if you felt malicious, potentially preventing other VMs from booting.

I think the most correct behavior here is to refuse the transfer if it violates either quota limit on the receiving end.