yahoo-eng-team team mailing list archive

[Kévin Bernard-Allies <kbernard-allies@xxxxxxxx>]

Public bug reported:


Actually, Keystone accepts to create a region with an empty ID in the request body, and creates a unreachable region, with no possibility to use, modify or delete them.


> curl  -X POST  -H "X-Auth-Token: *TOKEN*"  -H 'Content-type: application/json' http://localhost:35357/v3/regions/  -d '{"region":{"id":""}}'
{"region": {"parent_region_id": null, "id": "", "links": {"self": "http://localhost:35357/v3/regions/"}, "description": ""}}


Instead, It should return a 400 Bad Request error.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1322639

Title:
  region creation API should not allow empty id

Status in OpenStack Identity (Keystone):
  New

Bug description:
  
  Actually, Keystone accepts to create a region with an empty ID in the request body, and creates a unreachable region, with no possibility to use, modify or delete them.

  
  > curl  -X POST  -H "X-Auth-Token: *TOKEN*"  -H 'Content-type: application/json' http://localhost:35357/v3/regions/  -d '{"region":{"id":""}}'
  {"region": {"parent_region_id": null, "id": "", "links": {"self": "http://localhost:35357/v3/regions/"}, "description": ""}}

  
  Instead, It should return a 400 Bad Request error.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1322639/+subscriptions