← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1912747] [NEW] security group does not verify the tenant id

 

Public bug reported:

how to reproduce the problem:
1.source admin-openrc
2.list security groups with tenant_id, tenant_id does not actually exist
curl -g -i -X GET http://192.168.40.66:9696/v2.0/security-groups?tenant_id=99977aaf8d7a466aaa8c16895cfad666 -H "Accept: application/json" -H "User-Agent: python-neutronclient" -H "X-Auth-Token: gAAAAABgCn8d4Ju6VHm76-d5uMS49mPU7NbgcVkj_U6xesxwanhxFTjN36hyEkxVBV8X_2mx2cXRbbLkcmGpk79G157GaOHowre0SQMWEsRKHzKDH_NgXAYWAwfDSC--mmibs85n7Wt9gWJaMKykLnuM0Yw9yLFvYpmzHkM96WM0dI5QJwriG2U"
3.query the security group in the database
MariaDB [neutron]> select * from securitygroups where project_id='99977aaf8d7a466aaa8c16895cfad666';
+----------------------------------+--------------------------------------+---------+------------------+----------+
| project_id                       | id                                   | name    | standard_attr_id | stateful |
+----------------------------------+--------------------------------------+---------+------------------+----------+
| 99977aaf8d7a466aaa8c16895cfad666 | 4eec88c3-678e-467b-ba4c-702611180699 | default |              589 |        1 |
+----------------------------------+--------------------------------------+---------+------------------+----------+

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1912747

Title:
  security group does not verify the tenant id

Status in neutron:
  New

Bug description:
  how to reproduce the problem:
  1.source admin-openrc
  2.list security groups with tenant_id, tenant_id does not actually exist
  curl -g -i -X GET http://192.168.40.66:9696/v2.0/security-groups?tenant_id=99977aaf8d7a466aaa8c16895cfad666 -H "Accept: application/json" -H "User-Agent: python-neutronclient" -H "X-Auth-Token: gAAAAABgCn8d4Ju6VHm76-d5uMS49mPU7NbgcVkj_U6xesxwanhxFTjN36hyEkxVBV8X_2mx2cXRbbLkcmGpk79G157GaOHowre0SQMWEsRKHzKDH_NgXAYWAwfDSC--mmibs85n7Wt9gWJaMKykLnuM0Yw9yLFvYpmzHkM96WM0dI5QJwriG2U"
  3.query the security group in the database
  MariaDB [neutron]> select * from securitygroups where project_id='99977aaf8d7a466aaa8c16895cfad666';
  +----------------------------------+--------------------------------------+---------+------------------+----------+
  | project_id                       | id                                   | name    | standard_attr_id | stateful |
  +----------------------------------+--------------------------------------+---------+------------------+----------+
  | 99977aaf8d7a466aaa8c16895cfad666 | 4eec88c3-678e-467b-ba4c-702611180699 | default |              589 |        1 |
  +----------------------------------+--------------------------------------+---------+------------------+----------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1912747/+subscriptions