yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #84968
[Bug 1912747] [NEW] security group does not verify the tenant id
Public bug reported:
how to reproduce the problem:
1.source admin-openrc
2.list security groups with tenant_id, tenant_id does not actually exist
curl -g -i -X GET http://192.168.40.66:9696/v2.0/security-groups?tenant_id=99977aaf8d7a466aaa8c16895cfad666 -H "Accept: application/json" -H "User-Agent: python-neutronclient" -H "X-Auth-Token: gAAAAABgCn8d4Ju6VHm76-d5uMS49mPU7NbgcVkj_U6xesxwanhxFTjN36hyEkxVBV8X_2mx2cXRbbLkcmGpk79G157GaOHowre0SQMWEsRKHzKDH_NgXAYWAwfDSC--mmibs85n7Wt9gWJaMKykLnuM0Yw9yLFvYpmzHkM96WM0dI5QJwriG2U"
3.query the security group in the database
MariaDB [neutron]> select * from securitygroups where project_id='99977aaf8d7a466aaa8c16895cfad666';
+----------------------------------+--------------------------------------+---------+------------------+----------+
| project_id | id | name | standard_attr_id | stateful |
+----------------------------------+--------------------------------------+---------+------------------+----------+
| 99977aaf8d7a466aaa8c16895cfad666 | 4eec88c3-678e-467b-ba4c-702611180699 | default | 589 | 1 |
+----------------------------------+--------------------------------------+---------+------------------+----------+
** Affects: neutron
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1912747
Title:
security group does not verify the tenant id
Status in neutron:
New
Bug description:
how to reproduce the problem:
1.source admin-openrc
2.list security groups with tenant_id, tenant_id does not actually exist
curl -g -i -X GET http://192.168.40.66:9696/v2.0/security-groups?tenant_id=99977aaf8d7a466aaa8c16895cfad666 -H "Accept: application/json" -H "User-Agent: python-neutronclient" -H "X-Auth-Token: gAAAAABgCn8d4Ju6VHm76-d5uMS49mPU7NbgcVkj_U6xesxwanhxFTjN36hyEkxVBV8X_2mx2cXRbbLkcmGpk79G157GaOHowre0SQMWEsRKHzKDH_NgXAYWAwfDSC--mmibs85n7Wt9gWJaMKykLnuM0Yw9yLFvYpmzHkM96WM0dI5QJwriG2U"
3.query the security group in the database
MariaDB [neutron]> select * from securitygroups where project_id='99977aaf8d7a466aaa8c16895cfad666';
+----------------------------------+--------------------------------------+---------+------------------+----------+
| project_id | id | name | standard_attr_id | stateful |
+----------------------------------+--------------------------------------+---------+------------------+----------+
| 99977aaf8d7a466aaa8c16895cfad666 | 4eec88c3-678e-467b-ba4c-702611180699 | default | 589 | 1 |
+----------------------------------+--------------------------------------+---------+------------------+----------+
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1912747/+subscriptions