yahoo-eng-team team mailing list archive

[Cyril Roelandt <1346648@xxxxxxxxxxxxxxxxxx>]

v1 has been deprecated forever, so if this is fixed in v2 (thanks to
b159aa8b644338360f6e90d34af40a662246fe47), this bug can be considered as
closed.

** Changed in: glance
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1346648

Title:
  glance APIs missing target for most policy checks

Status in Glance:
  Fix Released

Bug description:
  API calls in glance.api.v1.images call the _enforce() helper method
  for various actions: "create_image", "update_image", "delete_image",
  etc. but do not pass the image as the target for the policy check. [1]

  This means that you cannot provide access to these APIs on a per-
  object basis. Furthermore it is inconsistent with the way other
  projects handle policy checks.

  [1]
  https://github.com/openstack/glance/blob/master/glance/api/v1/images.py#L154

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1346648/+subscriptions