yahoo-eng-team team mailing list archive

[Erno Kuvaja <jokke@xxxxxx>]

** Changed in: glance
       Status: Opinion => In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1400366

Title:
  Glance allows to sort images by private fields

Status in OpenStack Image Registry and Delivery Service (Glance):
  In Progress

Bug description:
  Glance api supports sorting only by 'name', 'status', 'container_format',  'disk_format', 'size', 'id', 'created_at', 'updated_at'
  But now it's possible to make sorting by private fields like checksum or min_ram (/images?sort_key=checksum), that violates api.

  It's possible because there is no key validation on the api layer in v2. 
  There is a check on the db in pagination, but it covers all the fields (not only api), which causes a problem.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1400366/+subscriptions