yahoo-eng-team team mailing list archive

[Matthias Runge <1411239@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

I'm trying to prevent a user to boot from a glance image (for whatever reason)
I went ahead and changed glance_policy:

   "get_image": "role:admin",
    "get_images": "role:admin",


still a normal user can see and apparently boot from glance. Shouldn't that be prevented by policy checks?

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1411239

Title:
  policy checks for get_image, get_images not working

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  I'm trying to prevent a user to boot from a glance image (for whatever reason)
  I went ahead and changed glance_policy:

     "get_image": "role:admin",
      "get_images": "role:admin",

  
  still a normal user can see and apparently boot from glance. Shouldn't that be prevented by policy checks?

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1411239/+subscriptions