yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1251058] Re: Attempting to create image members for images you do not own in v2 returns 403 instead of 404

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Alex Meade <1251058@xxxxxxxxxxxxxxxxxx>
Date: Thu, 14 Nov 2013 15:31:30 -0000
Reply-to: Bug 1251058 <1251058@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Actually, yeah i agree with you Fei. The user can see the image anyways
so it's not like we need to hide the fact it exists. I need to stop
listening to other people :P

** Changed in: glance
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1251058

Title:
  Attempting to create image members for images you do not own in v2
  returns 403 instead of 404

Status in OpenStack Image Registry and Delivery Service (Glance):
  Invalid

Bug description:
  Attempting to create image members for images you do not own in v2
  returns 403 instead of 404

  curl -i -X POST -H "Content-Type: application/json" -H "X-Auth-Token:
  $AUTH_TOKEN" https://localhost/v2/5855307/images/d675491a-83e0-4ddc-
  9c46-269da8b57b1a/members -d '{"member": 5937330}'

  HTTP/1.1 403 Forbidden

  <html>
   <head>
    <title>403 Forbidden</title>
   </head>
   <body>
    <h1>403 Forbidden</h1>
    You are not permitted to create image members for the image.<br /><br />
   </body>
  </html>

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1251058/+subscriptions