yahoo-eng-team team mailing list archive

[OpenStack Infra <1690790@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/527414
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=c999239fed8d2213a8913d1cc8fb294f7086b594
Submitter: Zuul
Branch:    master

commit c999239fed8d2213a8913d1cc8fb294f7086b594
Author: Abdallah Banishamsa <abdullah.banishamsa@xxxxxxxx>
Date:   Tue Dec 12 09:25:05 2017 -0500

    Prevent non-admin users from detaching interfaces
    
    Remove the option to detach_interface from running instances for
    non-admin users.
    
    Change-Id: Id641bde457e8723ace0bc1e49aab2c46b2227485
    Closes-bug: #1690790


** Changed in: horizon
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1690790

Title:
  policy checks for detach_interface not working correctly

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  Hello,

  we want to prevent non-admin users to detach interfaces from running instances. So we changed the policy to 
      "compute:detach_interface": "role:admin",
  but still non-admin users see the Option and can use it.

  Am I missing some place to declare this option?

  Kind regards,
  Kenneth Cummings

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1690790/+subscriptions