yahoo-eng-team team mailing list archive

[Michael Turek <mjturek@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When removing all properties of an image using --purge-props, protected
properties are also removed. I saw this behavior using v1 glance-client
and v1 api. The documentation for protected properties states:

"Property protections will still be honoured if 'X-glance-registry-
Purge-props' is set to 'True'. That is, if you request to modify
properties with this header set to `True`, you will not be able to
delete or update properties for which you do not have the relevant
permissions. Properties which are not included in the request and for
which you do have delete permissions will still be removed."

This does not seem to happen. My hope is to restore/create this
functionality.

So far, I'm convinced that this is a glance issue rather than a glance-
client issue. If it turns out to be otherwise, I will adjust the bug
report accordingly.

** Affects: glance
     Importance: Undecided
     Assignee: Michael Turek (mjturek)
         Status: New


** Tags: protected-properties purge-props

** Changed in: glance
     Assignee: (unassigned) => Michael Turek (mjturek)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1356519

Title:
  purge-props does not honor property protections

Status in OpenStack Image Registry and Delivery Service (Glance):
  New

Bug description:
  When removing all properties of an image using --purge-props,
  protected properties are also removed. I saw this behavior using v1
  glance-client and v1 api. The documentation for protected properties
  states:

  "Property protections will still be honoured if 'X-glance-registry-
  Purge-props' is set to 'True'. That is, if you request to modify
  properties with this header set to `True`, you will not be able to
  delete or update properties for which you do not have the relevant
  permissions. Properties which are not included in the request and for
  which you do have delete permissions will still be removed."

  This does not seem to happen. My hope is to restore/create this
  functionality.

  So far, I'm convinced that this is a glance issue rather than a
  glance-client issue. If it turns out to be otherwise, I will adjust
  the bug report accordingly.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1356519/+subscriptions