yahoo-eng-team team mailing list archive

[Rodolfo Alonso <2038646@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

* "get_subnet"
Currently only the admin or a project reader can get a subnet. However, it doesn't make sense that the net owner can create the subnet [1] but cannot list it.

* "update_subnet"
Currently only the admin and the network owner can modify the subnet. Any project member should be able too.

* "delete_subnet"
Same argument as in "update_subnet"

[1]https://github.com/openstack/neutron/blob/8cba97016e421e4b01b96de70b4b194972d0186f/neutron/conf/policies/subnet.py#L42-L43

** Affects: neutron
     Importance: Medium
     Assignee: Rodolfo Alonso (rodolfo-alonso-hernandez)
         Status: New

** Changed in: neutron
   Importance: Undecided => Low

** Changed in: neutron
     Assignee: (unassigned) => Rodolfo Alonso (rodolfo-alonso-hernandez)

** Changed in: neutron
   Importance: Low => Medium

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2038646

Title:
  [RBAC] Update "subnet" policies

Status in neutron:
  New

Bug description:
  * "get_subnet"
  Currently only the admin or a project reader can get a subnet. However, it doesn't make sense that the net owner can create the subnet [1] but cannot list it.

  * "update_subnet"
  Currently only the admin and the network owner can modify the subnet. Any project member should be able too.

  * "delete_subnet"
  Same argument as in "update_subnet"

  [1]https://github.com/openstack/neutron/blob/8cba97016e421e4b01b96de70b4b194972d0186f/neutron/conf/policies/subnet.py#L42-L43

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2038646/+subscriptions