yahoo-eng-team team mailing list archive

[OpenStack Infra <2104173@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/c/openstack/horizon/+/945527
Committed: https://opendev.org/openstack/horizon/commit/f0ed422eb3c7b39530ec7b97c9dff1dd54089342
Submitter: "Zuul (22348)"
Branch:    master

commit f0ed422eb3c7b39530ec7b97c9dff1dd54089342
Author: Andrew Bogott <abogott@xxxxxxxxxxxxx>
Date:   Tue Mar 25 16:19:26 2025 -0500

    network_topology: check policy for UI elements
    
    Previously this UI would enable buttons to delete instances or
    networks when those actions are not permitted and would fail.
    
    Bug: 2104173
    Change-Id: I60c2c1c87605fd4796439e60f3a623722bd4b09f


** Changed in: horizon
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/2104173

Title:
  network topology UI too enthusiastic about deletions

Status in OpenStack Dashboard (Horizon):
  Fix Released

Bug description:
  The attached screenshots are from the 'network topology' horizon
  panel. I'm running as a user with restricted read-only rights, and yet
  the UI suggests that I delete VMs (which I am not allowed to delete)
  and networks (which I am not allowed to delete.)

  This isn't a security issue since the neutron and nova APIs won't
  actually allow the deletion. Still, the UI is wrong and alarming.

  We need policy checks around these buttons.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/2104173/+subscriptions