yahoo-eng-team team mailing list archive

[Luke Wollney <1438826@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Overview:
A user is able to update an image via PATCH /images/<image_id> when passing in id, file, location, schema, and self. However, these are restricted image properties.

Steps to reproduce:
1) Create an image
2) Update the image via PATCH /images/<image_id> and pass in id, file, location, schema, and self
2) Notice the request is accepted and the image is updated

Expected:
Because these properties are restricted, when attempting to update an image and they appear to be properties that should be automatically generated, the request should not be allowed.

Actual:
The request is accepted and the image is updated

** Affects: glance
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1438826

Title:
  Able to update an image passing id, file, location, schema, and self

Status in OpenStack Image Registry and Delivery Service (Glance):
  New

Bug description:
  Overview:
  A user is able to update an image via PATCH /images/<image_id> when passing in id, file, location, schema, and self. However, these are restricted image properties.

  Steps to reproduce:
  1) Create an image
  2) Update the image via PATCH /images/<image_id> and pass in id, file, location, schema, and self
  2) Notice the request is accepted and the image is updated

  Expected:
  Because these properties are restricted, when attempting to update an image and they appear to be properties that should be automatically generated, the request should not be allowed.

  Actual:
  The request is accepted and the image is updated

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1438826/+subscriptions