yahoo-eng-team team mailing list archive

[Yanis Guenane <yanis.guenane@xxxxxxxxxxxx>]

Public bug reported:

During the image-create action, the copy_from policy is properly
enforced. But it is not during the update process.

Meaning, a non-authorized user can create an empty image and then update
it with the --copy-from option even if policy.json says it othewise.

** Affects: glance
     Importance: Undecided
     Assignee: Yanis Guenane (yanis-guenane)
         Status: New

** Changed in: glance
     Assignee: (unassigned) => Yanis Guenane (yanis-guenane)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1259241

Title:
  copy_from policy not enforced during update

Status in OpenStack Image Registry and Delivery Service (Glance):
  New

Bug description:
  During the image-create action, the copy_from policy is properly
  enforced. But it is not during the update process.

  Meaning, a non-authorized user can create an empty image and then
  update it with the --copy-from option even if policy.json says it
  othewise.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1259241/+subscriptions