Reviewed: https://review.openstack.org/351077 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=16a38564cb61031466bf60ac393363bfeaedbd93 Submitter: Jenkins Branch: master
commit 16a38564cb61031466bf60ac393363bfeaedbd93 Author: Takashi NATSUME <natsume.taka...@lab.ntt.co.jp> Date: Thu Aug 4 17:56:58 2016 +0900 Fix server operations' policies to admin only Before the following policies were set to admin only operations by default. * detail:get_all_tenants * index:get_all_tenants * create:forced_host But currently they are not limited to admin users by default. They were changed unintentionally in I71b3d1233255125cb280a000b990329f5b03fdfd. So set them admin only again. And a unit test for policy is fixed. Change-Id: I1c0a4f1ff19d68152953dd6b265a7fb2e0f6271a Closes-Bug: #1609625 Closes-Bug: #1609691 Closes-Bug: #1611628 ** Changed in: nova Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova). https://bugs.launchpad.net/bugs/1609625 Title: The 'create:forced_host' policy is set to 'rule:admin_or_owner' by default Status in OpenStack Compute (nova): Fix Released Bug description: The 'create:forced_host' policy is set to 'rule:admin_or_owner' by default currently (master: 5d040245e750aab06c620344828c2182703515b7). https://github.com/openstack/nova/blob/5d040245e750aab06c620344828c2182703515b7/nova/policies/servers.py#L32 But it was 'rule:admin_api' before. It was changed in the following patch. https://review.openstack.org/#/c/329122/ It should be restored to a previous value. To manage notifications about this bug go to: https://bugs.launchpad.net/nova/+bug/1609625/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp