yahoo-eng-team team mailing list archive

[Sourabh Jaiswal <sourabh.jaiswal@xxxxxxxxxxxxxxx>]

** Also affects: ubuntu
   Importance: Undecided
       Status: New

** No longer affects: ubuntu

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1482077

Title:
  admin unable to download image in "deactivated" state

Status in Glance:
  New

Bug description:
  Description:
  when admin user try to download "deactivated" image, getting response "403 forbidden" which is unexpected as per feature "Provide the ability to temporarily deactivate an image".

  Steps:
  1. curl command used to generate token using admin user credential.
  2. curl command used to deactivate image using admin token.
  3. verified on horizon dashboard that image is in deactivated state.
  4. curl command used and tried downloading deactivated image using admin token.
  5. received error response "<h1>403 Forbidden</h1>
    The requested image has been deactivated. Image data download is forbidden.<br /><br />"---- unexpected.

  Expected:
  1. admin user should be able to download the deactivated image.

  Supportive details:
  as per the release note of glance in Kilo under "Provide the ability to temporarily deactivate an image " it was mentioned in "Proposed change"  that 
  ++++++++++++++++
  When an image is placed in the deactivated state, image data may not be downloaded by a non-admin user. This will include all other operations (such as export and cloning) which may need access to image data. Admins may continue to download the data to facilitate testing and examination of the image. 
  +++++++++++++++++++

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1482077/+subscriptions