yahoo-eng-team team mailing list archive

[OpenStack Infra <1873007@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/721225
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=423734b5ecb521b5574655d88d39184540f34b2d
Submitter: Zuul
Branch:    master

commit 423734b5ecb521b5574655d88d39184540f34b2d
Author: Gayathri Devi Kathiri <gayathri.devi@xxxxxxxxxxxx>
Date:   Mon Apr 20 10:13:49 2020 +0000

    Fix "Update Metadata" tab on Horizon
    
    "Update Metadata" button is visible by all
    roles on "Volumes" and "Snaphsots".
    
    "policy_rules" is defined in "UpdateMetadata"
    class to fix it.
    
    Change-Id: Ibbdd4e4874c7cea97c91948003a68ebf43b8c934
    closes-bug: #1873007


** Changed in: horizon
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1873007

Title:
  All roles allowed to edit metadata on cinder volumes and snapshots

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  "Update Metadata" button is visible by all roles on following objects :
  volumes
  snapshots
  and allow them to update it even when they should not be able to.

  Steps to Reproduce:
  1. Login to the horizon  with the user which has non-admin role and check the Volumes and Snapshots in the below Horizon path. 
  Project->Volumes->Volumes and 
  Project->Volumes->Snapshots
  "UpdateMetadata" will be visible for Volumes and Snapshots.

  Reproduced on horizon stein and train.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1873007/+subscriptions