← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 2016266] [NEW] [Secure RBAC] Get availability zone API should be available for READER role

 

Public bug reported:

get_availability_zone API was available for everyone (rule ANY) in old
policies but for some reason (probably mistake) it's allowed only for
ADMIN user with new policies. It should be changed to allow this API
call for READERs.

** Affects: neutron
     Importance: High
         Status: Confirmed


** Tags: api

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2016266

Title:
  [Secure RBAC] Get availability zone API should be available for READER
  role

Status in neutron:
  Confirmed

Bug description:
  get_availability_zone API was available for everyone (rule ANY) in old
  policies but for some reason (probably mistake) it's allowed only for
  ADMIN user with new policies. It should be changed to allow this API
  call for READERs.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2016266/+subscriptions



Follow ups