← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1517060] [NEW] User (without admin privileges) can change size your own image with 'deactivated' status.

 

Public bug reported:

Steps to reproduce:

1. Create a new image with 'active' status.
2. Deactivate this image from admin. (image should have a 'deactivated' status)
3. Use this curl request:
curl -X PUT http://localhost:9292/v1/images/<USER_IMAGE_ID> -H 'X-Auth-Token: <USER_TOKEN>' -H 'x-image-meta-size: 1234567'
4. Verify that created image have a '1234567' size.

** Affects: glance
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1517060

Title:
  User (without admin privileges) can change size your own image with
  'deactivated' status.

Status in Glance:
  New

Bug description:
  Steps to reproduce:

  1. Create a new image with 'active' status.
  2. Deactivate this image from admin. (image should have a 'deactivated' status)
  3. Use this curl request:
  curl -X PUT http://localhost:9292/v1/images/<USER_IMAGE_ID> -H 'X-Auth-Token: <USER_TOKEN>' -H 'x-image-meta-size: 1234567'
  4. Verify that created image have a '1234567' size.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1517060/+subscriptions


Follow ups