yahoo-eng-team team mailing list archive

[Kenji Ishii <ken-ishii@xxxxxxxxxxxxx>]

Public bug reported:

Panels listing of below are not set proper policy rules. These are only set a permission of service.
Therefore if service is enable but a user don't have a privilege by policy.json, a user will be able to display its page but an API error will occur.
I think we should address it like a "projects" panel.

openstack_dashboard/dashboards/admin/aggregates/panel.py
openstack_dashboard/dashboards/admin/defaults/panel.py
openstack_dashboard/dashboards/admin/flavors/panel.py
openstack_dashboard/dashboards/admin/hypervisors/panel.py
openstack_dashboard/dashboards/admin/images/panel.py
openstack_dashboard/dashboards/admin/info/panel.py
openstack_dashboard/dashboards/admin/instances/panel.py
openstack_dashboard/dashboards/admin/metadata_defs/panel.py
openstack_dashboard/dashboards/admin/networks/panel.py
openstack_dashboard/dashboards/admin/routers/panel.py
openstack_dashboard/dashboards/admin/volumes/panel.py
openstack_dashboard/dashboards/project/access_and_security/panel.py
openstack_dashboard/dashboards/project/firewalls/panel.py
openstack_dashboard/dashboards/project/images/panel.py
openstack_dashboard/dashboards/project/instances/panel.py
openstack_dashboard/dashboards/project/loadbalancers/panel.py
openstack_dashboard/dashboards/project/network_topology/panel.py
openstack_dashboard/dashboards/project/networks/panel.py
openstack_dashboard/dashboards/project/ngimages/panel.py
openstack_dashboard/dashboards/project/overview/panel.py
openstack_dashboard/dashboards/project/routers/panel.py
openstack_dashboard/dashboards/project/stacks/panel.py
openstack_dashboard/dashboards/project/stacks/resource_types/panel.py

** Affects: horizon
     Importance: Undecided
     Assignee: Kenji Ishii (ken-ishii)
         Status: New

** Changed in: horizon
     Assignee: (unassigned) => Kenji Ishii (ken-ishii)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1534495

Title:
  Some panels is not set  proper policy rules

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  Panels listing of below are not set proper policy rules. These are only set a permission of service.
  Therefore if service is enable but a user don't have a privilege by policy.json, a user will be able to display its page but an API error will occur.
  I think we should address it like a "projects" panel.

  openstack_dashboard/dashboards/admin/aggregates/panel.py
  openstack_dashboard/dashboards/admin/defaults/panel.py
  openstack_dashboard/dashboards/admin/flavors/panel.py
  openstack_dashboard/dashboards/admin/hypervisors/panel.py
  openstack_dashboard/dashboards/admin/images/panel.py
  openstack_dashboard/dashboards/admin/info/panel.py
  openstack_dashboard/dashboards/admin/instances/panel.py
  openstack_dashboard/dashboards/admin/metadata_defs/panel.py
  openstack_dashboard/dashboards/admin/networks/panel.py
  openstack_dashboard/dashboards/admin/routers/panel.py
  openstack_dashboard/dashboards/admin/volumes/panel.py
  openstack_dashboard/dashboards/project/access_and_security/panel.py
  openstack_dashboard/dashboards/project/firewalls/panel.py
  openstack_dashboard/dashboards/project/images/panel.py
  openstack_dashboard/dashboards/project/instances/panel.py
  openstack_dashboard/dashboards/project/loadbalancers/panel.py
  openstack_dashboard/dashboards/project/network_topology/panel.py
  openstack_dashboard/dashboards/project/networks/panel.py
  openstack_dashboard/dashboards/project/ngimages/panel.py
  openstack_dashboard/dashboards/project/overview/panel.py
  openstack_dashboard/dashboards/project/routers/panel.py
  openstack_dashboard/dashboards/project/stacks/panel.py
  openstack_dashboard/dashboards/project/stacks/resource_types/panel.py

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1534495/+subscriptions