yahoo-eng-team team mailing list archive

[Nobuto Murata <nobuto@xxxxxxxxxxxxxxxxx>]

*** This bug is a duplicate of bug 1698490 ***
    https://bugs.launchpad.net/bugs/1698490

Public bug reported:

Horizon has a "Visibility" field as public/private when uploading
images.

According to the code, it looks like Horizon checks if the user has a
privilege to publicize an image, then hide the form when it's non-
privileged user (non-admin by default).

[openstack_dashboard/dashboards/project/images/images/forms.py]
        if not policy.check((("image", "publicize_image"),), request):
            self._hide_is_public()

However, it seems not working for me. I still see public/private button
even with non-admin user and image upload fails by default because the
default choice is public (bug 1699144).

I'm using Ocata right now and I didn't check the behavior in Pike, but
forms.py has not been changed so much since Ocata.

** Affects: horizon
     Importance: Undecided
         Status: New

** This bug has been marked a duplicate of bug 1698490
   Non-admin users shouldn't be able to create public images

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1715193

Title:
  Horizon does not hide image "Visibility" field even with non-admin
  user

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  Horizon has a "Visibility" field as public/private when uploading
  images.

  According to the code, it looks like Horizon checks if the user has a
  privilege to publicize an image, then hide the form when it's non-
  privileged user (non-admin by default).

  [openstack_dashboard/dashboards/project/images/images/forms.py]
          if not policy.check((("image", "publicize_image"),), request):
              self._hide_is_public()

  However, it seems not working for me. I still see public/private
  button even with non-admin user and image upload fails by default
  because the default choice is public (bug 1699144).

  I'm using Ocata right now and I didn't check the behavior in Pike, but
  forms.py has not been changed so much since Ocata.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1715193/+subscriptions