yahoo-eng-team team mailing list archive

[OpenStack Infra <2016266@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/c/openstack/neutron/+/880461
Committed: https://opendev.org/openstack/neutron/commit/6b5acb58357b94fad7c3868ab650726b922af51a
Submitter: "Zuul (22348)"
Branch:    master

commit 6b5acb58357b94fad7c3868ab650726b922af51a
Author: Slawek Kaplonski <skaplons@xxxxxxxxxx>
Date:   Fri Apr 14 10:38:52 2023 +0200

    [S-RBAC] Get availability zone API available for READER role
    
    API call get_availability_zone should be available in new policies for
    all users with READER role as this is kind of the same what was in the
    old policies (ANY).
    
    Closes-bug: #2016266
    
    Change-Id: I8a99bc52bd815fb3395e902fc8f85cf5f187e288


** Changed in: neutron
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2016266

Title:
  [Secure RBAC] Get availability zone API should be available for READER
  role

Status in neutron:
  Fix Released

Bug description:
  get_availability_zone API was available for everyone (rule ANY) in old
  policies but for some reason (probably mistake) it's allowed only for
  ADMIN user with new policies. It should be changed to allow this API
  call for READERs.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2016266/+subscriptions