yahoo-eng-team team mailing list archive

[Perry <panxia6679@xxxxxxxx>]

Public bug reported:

For user who doesn't have admin role or isn't shared network's owner, he
/ she can see shared network and related subnet, but fail to create port
when specifying fixed_ips.


Policy to allow GET, but disallow to create port when specified fixed_ips.
#user can see share networks
"get_network": "rule:admin_or_owner or rule:shared or rule:external or rule:context_is_advsvc",
#user can see share subnets
"get_subnet": "rule:admin_or_owner or rule:shared",
#user won't be able to create port when specifying fixed_ips
"create_port:fixed_ips": "rule:context_is_advsvc or rule:admin_or_network_owner",

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1592270

Title:
  can get shared network/subnet, but fail to create port when fixed_ip
  is specified

Status in neutron:
  New

Bug description:
  For user who doesn't have admin role or isn't shared network's owner,
  he / she can see shared network and related subnet, but fail to create
  port when specifying fixed_ips.

  
  Policy to allow GET, but disallow to create port when specified fixed_ips.
  #user can see share networks
  "get_network": "rule:admin_or_owner or rule:shared or rule:external or rule:context_is_advsvc",
  #user can see share subnets
  "get_subnet": "rule:admin_or_owner or rule:shared",
  #user won't be able to create port when specifying fixed_ips
  "create_port:fixed_ips": "rule:context_is_advsvc or rule:admin_or_network_owner",

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1592270/+subscriptions