yahoo-eng-team team mailing list archive

[Hemachandra Reddy <hr858f@xxxxxxx>]

Public bug reported:

Removing a network flavor profile for non-admin roles through API fails
with "Failed to check policy tenant_id:%(tenant_id)s because Unable to
verify match:%(tenant_id)s as the parent resource: tenant was not
found."

Command: http://10.0.2.15:9696/v2.0/flavors/d3882929-3964-4f65-8c8f-
c2f56376c4c9/service_profiles/0030208f-6d54-40c0-81fd-e79d470353bd

Expected output: Should fail with 403

Actual output: {"NeutronError": {"message": "Failed to check policy
tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as
the parent resource: tenant was not found.", "type": "PolicyCheckError",
"detail": ""}}

Version: tried with Train release.

It currently fail the Zuul job for Patrole:
https://review.opendev.org/#/c/678260/.

It does not fail when tried with openstack CLI as it fails much before
when it tries to get service profile details which member does not have
access to.

** Affects: neutron
     Importance: Undecided
         Status: New


** Tags: network-flavor neutron patrole

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1843290

Title:
  Remove network flavor profile fails

Status in neutron:
  New

Bug description:
  Removing a network flavor profile for non-admin roles through API
  fails with "Failed to check policy tenant_id:%(tenant_id)s because
  Unable to verify match:%(tenant_id)s as the parent resource: tenant
  was not found."

  Command: http://10.0.2.15:9696/v2.0/flavors/d3882929-3964-4f65-8c8f-
  c2f56376c4c9/service_profiles/0030208f-6d54-40c0-81fd-e79d470353bd

  Expected output: Should fail with 403

  Actual output: {"NeutronError": {"message": "Failed to check policy
  tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s
  as the parent resource: tenant was not found.", "type":
  "PolicyCheckError", "detail": ""}}

  Version: tried with Train release.

  It currently fail the Zuul job for Patrole:
  https://review.opendev.org/#/c/678260/.

  It does not fail when tried with openstack CLI as it fails much before
  when it tries to get service profile details which member does not
  have access to.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1843290/+subscriptions