yahoo-eng-team team mailing list archive

[OpenStack Infra <1609625@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/351077
Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=16a38564cb61031466bf60ac393363bfeaedbd93
Submitter: Jenkins
Branch:    master

commit 16a38564cb61031466bf60ac393363bfeaedbd93
Author: Takashi NATSUME <natsume.takashi@xxxxxxxxxxxxx>
Date:   Thu Aug 4 17:56:58 2016 +0900

    Fix server operations' policies to admin only
    
    Before the following policies were set to admin only operations
    by default.
    
    * detail:get_all_tenants
    * index:get_all_tenants
    * create:forced_host
    
    But currently they are not limited to admin users by default.
    They were changed unintentionally in
    I71b3d1233255125cb280a000b990329f5b03fdfd.
    So set them admin only again.
    And a unit test for policy is fixed.
    
    Change-Id: I1c0a4f1ff19d68152953dd6b265a7fb2e0f6271a
    Closes-Bug: #1609625
    Closes-Bug: #1609691
    Closes-Bug: #1611628


** Changed in: nova
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1609625

Title:
  The 'create:forced_host' policy is set to 'rule:admin_or_owner' by
  default

Status in OpenStack Compute (nova):
  Fix Released

Bug description:
  The 'create:forced_host' policy is set to 'rule:admin_or_owner' by
  default currently (master: 5d040245e750aab06c620344828c2182703515b7).

  https://github.com/openstack/nova/blob/5d040245e750aab06c620344828c2182703515b7/nova/policies/servers.py#L32

  But it was 'rule:admin_api' before.
  It was changed in the following patch.

  https://review.openstack.org/#/c/329122/

  It should be restored to a previous value.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1609625/+subscriptions