yahoo-eng-team team mailing list archive

[Ala Rezmerita <ala.rezmerita@xxxxxxxxxxxxx>]

Public bug reported:

Hi ,
when glance image properties are protected, the check that handles the match between the user roles and CRUD rules with roles is case-sensitive. The check should be case-insensitive since https://bugs.launchpad.net/glance/+bug/1010519      

Example:

I have an image property "operator_property_name":

[operator_property_name]
create: admin, Member
read: admin, Member
update: admin, Member
delete: admin, Member

This gives the user with the role Member the possibility to create/read/update/delete this image property.
However all these operations will fail, because protected properties rules roles check is case-sensitive.

** Affects: glance
     Importance: Undecided
     Assignee: Ala Rezmerita (arezmerita)
         Status: New

** Changed in: glance
     Assignee: (unassigned) => Ala Rezmerita (arezmerita)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1430804

Title:
  Protected properties rules roles check is case-sensitive

Status in OpenStack Image Registry and Delivery Service (Glance):
  New

Bug description:
  Hi ,
  when glance image properties are protected, the check that handles the match between the user roles and CRUD rules with roles is case-sensitive. The check should be case-insensitive since https://bugs.launchpad.net/glance/+bug/1010519      

  Example:

  I have an image property "operator_property_name":

  [operator_property_name]
  create: admin, Member
  read: admin, Member
  update: admin, Member
  delete: admin, Member

  This gives the user with the role Member the possibility to create/read/update/delete this image property.
  However all these operations will fail, because protected properties rules roles check is case-sensitive.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1430804/+subscriptions