yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #82998
[Bug 1884067] [NEW] [API] Filtering by fields not allowed to see is possible for regular users
Public bug reported:
It seems that regular user, even if can't see binding:host_id field for
the port can filter based on this field:
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+
| id |
+--------------------------------------+
| 79949e8d-98dc-4fba-8897-c85a2bf89da7 |
| 7b91b484-4a9d-4160-84f7-bf1aed35d42a |
| 92023b4e-11bd-42be-a60d-609dc237873d |
| d987e708-1439-411d-848c-15a918ec3198 |
+--------------------------------------+
[stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-1.redhat.local
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
| id | name | mac_address | fixed_ips |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
| 7b91b484-4a9d-4160-84f7-bf1aed35d42a | | fa:16:3e:38:fe:b6 | {"subnet_id": "da9e51d0-a9a5-43ee-8ae1-d79bbfd9ee71", "ip_address": "192.168.100.151"} |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
[stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-0.redhat.local
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
** Affects: neutron
Importance: High
Status: Confirmed
** Tags: api
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1884067
Title:
[API] Filtering by fields not allowed to see is possible for regular
users
Status in neutron:
Confirmed
Bug description:
It seems that regular user, even if can't see binding:host_id field
for the port can filter based on this field:
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+
| id |
+--------------------------------------+
| 79949e8d-98dc-4fba-8897-c85a2bf89da7 |
| 7b91b484-4a9d-4160-84f7-bf1aed35d42a |
| 92023b4e-11bd-42be-a60d-609dc237873d |
| d987e708-1439-411d-848c-15a918ec3198 |
+--------------------------------------+
[stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-1.redhat.local
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
| id | name | mac_address | fixed_ips |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
| 7b91b484-4a9d-4160-84f7-bf1aed35d42a | | fa:16:3e:38:fe:b6 | {"subnet_id": "da9e51d0-a9a5-43ee-8ae1-d79bbfd9ee71", "ip_address": "192.168.100.151"} |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------------------+
[stack@undercloud-0 ~]$ neutron port-list --binding:host_id compute-0.redhat.local
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1884067/+subscriptions