← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1081941] Re: Deleted image can be downloaded by admin user

 

** Changed in: glance/grizzly
   Importance: Undecided => High

** Changed in: glance/grizzly
       Status: New => Fix Released

** Changed in: glance/grizzly
    Milestone: None => 2013.1

** Changed in: glance/grizzly
     Assignee: (unassigned) => Unmesh Gurjar (unmesh-gurjar)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1081941

Title:
  Deleted image can be downloaded by admin user

Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Released
Status in Glance grizzly series:
  Fix Released

Bug description:
  Branch: master

  Environment Details:
  Glance paste deploy flavor: keystone+cachemanagement

  Steps to repro:
  1. Upload a large image (around 1G).
  2. Once the image is active, simultaneously send GET and DELETE request for the image upload in #1 above.
  3. Try fetching the deleted image (using admin and non-admin user credentials).

  Expected Behavior:
  The API should return a 404 Not Found response.

  Actual Response:
  For admin user, the image is returned. However, for non-admin user it returns a 404.

  Analysis:
  The image stays in cache and hence becomes available to admin user.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1081941/+subscriptions