yahoo-eng-team team mailing list archive

[Maurice Schreiber <maurice.schreiber@xxxxxxx>]

Public bug reported:

We are on mitaka and use rbac to share private networks.
We defined in the neutron policy that non-admin users can attach router interfaces, but this fails on shared networks, because rbac is not taken into account here: https://github.com/openstack/neutron/blob/a0e0e8b6686b847a4963a6aa6a3224b5768544e6/neutron/api/v2/attributes.py#L372

The related error, that led me to that line is this:
http://paste.openstack.org/show/597918/

And this is still present in master:
https://github.com/openstack/neutron/blob/1c5bf09a03b0fe463ba446d2a19087be7a0504a7/neutron/api/v2/attributes.py#L372

I'm happy to give more details, if needed.

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1662477

Title:
  rbac shared network add_router_interface fails for non-admin

Status in neutron:
  New

Bug description:
  We are on mitaka and use rbac to share private networks.
  We defined in the neutron policy that non-admin users can attach router interfaces, but this fails on shared networks, because rbac is not taken into account here: https://github.com/openstack/neutron/blob/a0e0e8b6686b847a4963a6aa6a3224b5768544e6/neutron/api/v2/attributes.py#L372

  The related error, that led me to that line is this:
  http://paste.openstack.org/show/597918/

  And this is still present in master:
  https://github.com/openstack/neutron/blob/1c5bf09a03b0fe463ba446d2a19087be7a0504a7/neutron/api/v2/attributes.py#L372

  I'm happy to give more details, if needed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1662477/+subscriptions