← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1583958] Re: non-admin can create and list bgpspeakers but can not show or update speaker

 

Reviewed:  https://review.openstack.org/319558
Committed: https://git.openstack.org/cgit/openstack/neutron-dynamic-routing/commit/?id=62cb5c418442adc71469d74106839ad041b940ff
Submitter: Jenkins
Branch:    master

commit 62cb5c418442adc71469d74106839ad041b940ff
Author: Na <nazhu@xxxxxxxxxx>
Date:   Sat May 21 05:49:50 2016 -0700

    Fix the policy check for BGP APIs
    
    Only admin can configure BGP, this patch add policy check
    for BGP APIs.
    
    Change-Id: I5ce602202c52542792cc5b22e58e0ed074e09d7d
    Closes-Bug: #1583958


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1583958

Title:
  non-admin can create and list bgpspeakers but can not show or update
  speaker

Status in neutron:
  Fix Released

Bug description:
  Here is the configuration:
  [root@SG-dev-flynn-3-fwaas devstack]# source openrc demo demo
  WARNING: setting legacy OS_TENANT_NAME to support cli tools.
  [root@SG-dev-flynn-3-fwaas devstack]# nova list
  +----+------+--------+------------+-------------+----------+
  | ID | Name | Status | Task State | Power State | Networks |
  +----+------+--------+------------+-------------+----------+
  +----+------+--------+------------+-------------+----------+
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-create --ip-version 4 --local-as 777 106
  Created a new bgp_speaker:
  +-----------------------------------+--------------------------------------+
  | Field                             | Value                                |
  +-----------------------------------+--------------------------------------+
  | advertise_floating_ip_host_routes | True                                 |
  | advertise_tenant_networks         | True                                 |
  | id                                | ee03ac3c-81c8-46ce-abad-e3fac4877e87 |
  | ip_version                        | 4                                    |
  | local_as                          | 777                                  |
  | name                              | 106                                  |
  | networks                          |                                      |
  | peers                             |                                      |
  | tenant_id                         | 01c10991df8749d8a79694dad6dfb836     |
  +-----------------------------------+--------------------------------------+
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-create --ip-version 4 --local-as 7788 101 
  Created a new bgp_speaker:
  +-----------------------------------+--------------------------------------+
  | Field                             | Value                                |
  +-----------------------------------+--------------------------------------+
  | advertise_floating_ip_host_routes | True                                 |
  | advertise_tenant_networks         | True                                 |
  | id                                | cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 |
  | ip_version                        | 4                                    |
  | local_as                          | 7788                                 |
  | name                              | 101                                  |
  | networks                          |                                      |
  | peers                             |                                      |
  | tenant_id                         | 01c10991df8749d8a79694dad6dfb836     |
  +-----------------------------------+--------------------------------------+
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-list
  +--------------------------------------+------+----------+------------+
  | id                                   | name | local_as | ip_version |
  +--------------------------------------+------+----------+------------+
  | cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 | 101  |     7788 |          4 |
  | ee03ac3c-81c8-46ce-abad-e3fac4877e87 | 106  |      777 |          4 |
  +--------------------------------------+------+----------+------------+
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show cb0a27e5-42a6-44c1-914b-9bce85a4d1e1
  Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
  Neutron server returns request_ids: ['req-bff87635-2767-4bfd-b6e0-cc1399136d88']
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show 101                                 
  Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
  Neutron server returns request_ids: ['req-fd336b49-70e3-4a20-ba2d-9ca9889ea05c']
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show 106
  Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
  Neutron server returns request_ids: ['req-70354c3c-d59a-4f69-ba3a-54edbce12e44']
  [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-update --advertise-floating-ip-host-routes=False 106
  Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found.
  Neutron server returns request_ids: ['req-a13edca8-7d55-4568-a94f-a6bd228923fc']

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1583958/+subscriptions


References