yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #96504
[Bug 2125660] [NEW] [S-RBAC] User with reader role can create, updated and delete l3_conntrack_helpers
Public bug reported:
It is like that because wrong policy RULE_PARENT_OWNER
https://github.com/openstack/neutron/blob/e0ca9a0d68fbbcb98820f488accf2f84fb8c9639/neutron/conf/policies/l3_conntrack_helper.py#L35
is used in the default policies for those APIs. It should be
PARENT_OWNER_MEMBER for create, update and delete actions and
PARENT_OWNER_READER for get action.
** Affects: neutron
Importance: High
Assignee: Slawek Kaplonski (slaweq)
Status: Confirmed
** Tags: api
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2125660
Title:
[S-RBAC] User with reader role can create, updated and delete
l3_conntrack_helpers
Status in neutron:
Confirmed
Bug description:
It is like that because wrong policy RULE_PARENT_OWNER
https://github.com/openstack/neutron/blob/e0ca9a0d68fbbcb98820f488accf2f84fb8c9639/neutron/conf/policies/l3_conntrack_helper.py#L35
is used in the default policies for those APIs. It should be
PARENT_OWNER_MEMBER for create, update and delete actions and
PARENT_OWNER_READER for get action.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2125660/+subscriptions
Follow ups