registry team mailing list archive

[justinsb <607512@xxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Public security bug reported:

Currently nova/objectstore/handler.py does not actually check
authorization.

There's a  "# FIXME: check signature here!" around line 113

(Splitting this bug out from bug 607501)

** Affects: nova
     Importance: Undecided
         Status: New

** Visibility changed to: Public

-- 
Authorization not checked on objectstore
https://bugs.launchpad.net/bugs/607512
You received this bug notification because you are a member of Registry
Administrators, which is subscribed to OpenStack.