← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1884067] [NEW] [API] Filtering by fields not allowed to see is possible for regular users

 

Public bug reported:

It seems that regular user, even if can't see binding:host_id field for
the port can filter based on this field:

neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+
| id                                   |
+--------------------------------------+
| 79949e8d-98dc-4fba-8897-c85a2bf89da7 |
| 7b91b484-4a9d-4160-84f7-bf1aed35d42a |
| 92023b4e-11bd-42be-a60d-609dc237873d |
| d987e708-1439-411d-848c-15a918ec3198 |
+--------------------------------------+

 [stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-1.redhat.local
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
| id                                   | name | mac_address       | fixed_ips                                                                              |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
| 7b91b484-4a9d-4160-84f7-bf1aed35d42a |      | fa:16:3e:38:fe:b6 | {"subnet_id": "da9e51d0-a9a5-43ee-8ae1-d79bbfd9ee71", "ip_address": "192.168.100.151"} |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
 [stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-0.redhat.local
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.

** Affects: neutron
     Importance: High
         Status: Confirmed


** Tags: api

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1884067

Title:
  [API] Filtering by fields not allowed to see is possible for regular
  users

Status in neutron:
  Confirmed

Bug description:
  It seems that regular user, even if can't see binding:host_id field
  for the port can filter based on this field:

  neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
  +--------------------------------------+
  | id                                   |
  +--------------------------------------+
  | 79949e8d-98dc-4fba-8897-c85a2bf89da7 |
  | 7b91b484-4a9d-4160-84f7-bf1aed35d42a |
  | 92023b4e-11bd-42be-a60d-609dc237873d |
  | d987e708-1439-411d-848c-15a918ec3198 |
  +--------------------------------------+

   [stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-1.redhat.local
  neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
  +--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
  | id                                   | name | mac_address       | fixed_ips                                                                              |
  +--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
  | 7b91b484-4a9d-4160-84f7-bf1aed35d42a |      | fa:16:3e:38:fe:b6 | {"subnet_id": "da9e51d0-a9a5-43ee-8ae1-d79bbfd9ee71", "ip_address": "192.168.100.151"} |
  +--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
   [stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-0.redhat.local
  neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1884067/+subscriptions