yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: quantum
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to quantum.
https://bugs.launchpad.net/bugs/1179729

Title:
  The quota of administrator doesn't work if
  quantum.db.quota_db.DbQuotaDriver.

Status in OpenStack Quantum (virtual network service):
  Fix Released

Bug description:
  Administrator can create resource, even if the tenant of resource is
  different from the one of authentication. For example, administrator
  can operate 'quantum net-create' command with different tenant between
  --os-tenant-name and --tenant-id.

  In this case, quota cannot be restricted with the resource tenant, because it is restricted with --os-tenant-name.
  So administrator can create a resource over the quota of resource tenant.

  Example:

  quota of network for demo tenant is 10.
  quota of network for demo2 tenant is 5.
  demo2 tenant has 5 networks already.

  Expect:

  $ quantum --os-tenant-name ${demo1_name} net-create --tenant-id
  ${demo2_id} private6 Quota exceeded for resources: ['network']

  Actual:
  $ quantum --os-tenant-name ${demo1_name} net-create --tenant-id ${demo2_id} private6 Created a new network:
  +---------------------------+--------------------------------------+
  | Field                     | Value                                |
  +---------------------------+--------------------------------------+
  | admin_state_up            | True                                 |
  | id                        | c52eb67d-4953-45ce-aa06-69d21e481050 |
  | name                      | private6                             |
  | provider:network_type     | local                                |
  | provider:physical_network |                                      |
  | provider:segmentation_id  |                                      |
  | router:external           | False                                |
  | shared                    | False                                |
  | status                    | ACTIVE                               |
  | subnets                   |                                      |
  | tenant_id                 | 0958e49135d24e248cc39f76b48a9f13     |
  +---------------------------+--------------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/quantum/+bug/1179729/+subscriptions