yahoo-eng-team team mailing list archive

[Flavio Percoco <1517060@xxxxxxxxxxxxxxxxxx>]

** Also affects: glance/kilo
   Importance: Undecided
       Status: New

** Changed in: glance/kilo
   Importance: Undecided => High

** Changed in: glance/liberty
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1517060

Title:
  User (without admin privileges) can change size your own image with
  'deactivated' status.

Status in Glance:
  In Progress
Status in Glance kilo series:
  New
Status in Glance liberty series:
  New

Bug description:
  Steps to reproduce:

  1. Create a new image with 'active' status.
  2. Deactivate this image from admin. (image should have a 'deactivated' status)
  3. Use this curl request:
  curl -X PUT http://localhost:9292/v1/images/<USER_IMAGE_ID> -H 'X-Auth-Token: <USER_TOKEN>' -H 'x-image-meta-size: 1234567'
  4. Verify that created image have a '1234567' size.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1517060/+subscriptions