yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #96503
[Bug 2125657] [NEW] [S-RBAC] User with reader role can create and delete local_ip association
Public bug reported:
It is like that because wrong policy RULE_PARENT_OWNER
https://github.com/openstack/neutron/blob/master/neutron/conf/policies/local_ip_association.py#L32
is used in the default policies for those APIs. It should be
PARENT_OWNER_MEMBER for create and delete actions and
PARENT_OWNER_READER for get action.
** Affects: neutron
Importance: High
Assignee: Slawek Kaplonski (slaweq)
Status: Confirmed
** Tags: api
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2125657
Title:
[S-RBAC] User with reader role can create and delete local_ip
association
Status in neutron:
Confirmed
Bug description:
It is like that because wrong policy RULE_PARENT_OWNER
https://github.com/openstack/neutron/blob/master/neutron/conf/policies/local_ip_association.py#L32
is used in the default policies for those APIs. It should be
PARENT_OWNER_MEMBER for create and delete actions and
PARENT_OWNER_READER for get action.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2125657/+subscriptions
Follow ups