yahoo-eng-team team mailing list archive

[OpenStack Infra <1843290@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/682391
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=ac0a426017e92d5d73e97c26ef18a888e02da104
Submitter: Zuul
Branch:    master

commit ac0a426017e92d5d73e97c26ef18a888e02da104
Author: Slawek Kaplonski <skaplons@xxxxxxxxxx>
Date:   Mon Sep 16 17:33:03 2019 +0200

    Add policy config for get_flavor_service_profile operation
    
    Policy for this API call was commented out but it is needed
    for DELETE flavor_service_profile operation as Neutron's policy
    module looks for ability for SHOW command when DELETE is rejected
    to ensure what error message should be returned to the user.
    
    This patch will fix Patrole test failure, see related bug description
    for details.
    
    Change-Id: I4a0e97845a40888f7f2c7267d9adb7be663ee380
    Closes-Bug: #1843290


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1843290

Title:
  Remove network flavor profile fails

Status in neutron:
  Fix Released

Bug description:
  Removing a network flavor profile for non-admin roles through API
  fails with "Failed to check policy tenant_id:%(tenant_id)s because
  Unable to verify match:%(tenant_id)s as the parent resource: tenant
  was not found."

  Command: http://10.0.2.15:9696/v2.0/flavors/d3882929-3964-4f65-8c8f-
  c2f56376c4c9/service_profiles/0030208f-6d54-40c0-81fd-e79d470353bd

  Expected output: Should fail with 403

  Actual output: {"NeutronError": {"message": "Failed to check policy
  tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s
  as the parent resource: tenant was not found.", "type":
  "PolicyCheckError", "detail": ""}}

  Version: tried with Train release.

  It currently fail the Zuul job for Patrole:
  https://review.opendev.org/#/c/678260/.

  It does not fail when tried with openstack CLI as it fails much before
  when it tries to get service profile details which member does not
  have access to.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1843290/+subscriptions