yahoo-eng-team team mailing list archive

[wanghong <w.wanghong@xxxxxxxxxx>]

Public bug reported:

The image member has three status:pending, accepted and rejected. IMO,
only the accepted members can get image detail and download image file.
But, via my tests I found that the pending or rejected members also can
get image details and download image file. So, if a member is created
with accepted status, he can get some shared image ids. But if we change
his status to rejected or pending, he can still use these images!

** Affects: glance
     Importance: Undecided
     Assignee: wanghong (w-wanghong)
         Status: New

** Description changed:

  The image member has three status:pending, accepted and rejected. IMO,
  only the accepted members can get image detail and download image file.
  But, via my tests I found that the pending or rejected members also can
  get image details and download image file. So, if a member is created
- with accepted state, he can get some shared image ids. But if we change
- his state to rejected or pending, he can still use these images!
+ with accepted status, he can get some shared image ids. But if we change
+ his status to rejected or pending, he can still use these images!

** Changed in: glance
     Assignee: (unassigned) => wanghong (w-wanghong)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1293323

Title:
  rejected member can download image file

Status in OpenStack Image Registry and Delivery Service (Glance):
  New

Bug description:
  The image member has three status:pending, accepted and rejected. IMO,
  only the accepted members can get image detail and download image
  file. But, via my tests I found that the pending or rejected members
  also can get image details and download image file. So, if a member is
  created with accepted status, he can get some shared image ids. But if
  we change his status to rejected or pending, he can still use these
  images!

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1293323/+subscriptions