← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1517060] Re: User (without admin privileges) can change size your own image with 'deactivated' status.

 

As per the deactivation spec only the image data is inaccessible during
the deactivation. All the rest operations (that does not touch the
actual image data) should work normally.

http://specs.openstack.org/openstack/glance-specs/specs/kilo/deactivate-
image.html

** Changed in: glance
       Status: In Progress => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1517060

Title:
  User (without admin privileges) can change size your own image with
  'deactivated' status.

Status in Glance:
  Invalid

Bug description:
  Steps to reproduce:

  1. Create a new image with 'active' status.
  2. Deactivate this image from admin. (image should have a 'deactivated' status)
  3. Use this curl request:
  curl -X PUT http://localhost:9292/v1/images/<USER_IMAGE_ID> -H 'X-Auth-Token: <USER_TOKEN>' -H 'x-image-meta-size: 1234567'
  4. Verify that created image have a '1234567' size.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1517060/+subscriptions


References