yahoo-eng-team team mailing list archive

[Luke Wollney <1443512@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Overview:
When a user attempts to update an image by adding 'visibility' as an image property, a 200 response is returned.

Steps to reproduce:
1) Create an image
2) Update the image via PATCH /images/<id> passing '[{"path": "/visibility", "value": "private", "op": "add"}]'
3) Notice that a 200 accepted response is returned

Expected:
A 403 response should be returned

Actual:
A 200 response is returned

** Affects: glance
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1443512

Title:
  Updating an image by adding 'visibility' returns a 200 response

Status in OpenStack Image Registry and Delivery Service (Glance):
  New

Bug description:
  Overview:
  When a user attempts to update an image by adding 'visibility' as an image property, a 200 response is returned.

  Steps to reproduce:
  1) Create an image
  2) Update the image via PATCH /images/<id> passing '[{"path": "/visibility", "value": "private", "op": "add"}]'
  3) Notice that a 200 accepted response is returned

  Expected:
  A 403 response should be returned

  Actual:
  A 200 response is returned

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1443512/+subscriptions