[Yahoo-eng-team] [Bug 1464750] Re: Service accounts can be used to login horizon

2017-10-24 Thread Akihiro Motoki
As Horizon, we can potentially check a role of log-in user. service users like nova and neutron usually belong to a specific role. ** Changed in: horizon Status: Incomplete => Opinion -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is

[Yahoo-eng-team] [Bug 1464750] Re: Service accounts can be used to login horizon

2016-03-08 Thread Markus Zoeller (markus_z)
This bug report is specifically about the log into Horizon with a nova service user. That the nova user has the admin rights is covered in bug 1445199. That the admin role is not properly scoped is handled in bug 968696. Nova cannot prevent/influence log ins to Horizon. => Invalid for Nova **

[Yahoo-eng-team] [Bug 1464750] Re: Service accounts can be used to login horizon

2015-09-17 Thread Nathan Kinder
This has been published as OSSN-0055: https://wiki.openstack.org/wiki/OSSN/OSSN-0055 ** Changed in: ossn Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Compute (nova).

[Yahoo-eng-team] [Bug 1464750] Re: Service accounts can be used to login horizon

2015-08-07 Thread Adam Young
It might make sense to have Horizon limit login to users with the Member or Admin roles only. ** Also affects: nova Importance: Undecided Status: New ** Changed in: nova Assignee: (unassigned) = Adam Young (ayoung) -- You received this bug notification because you are a member

[Yahoo-eng-team] [Bug 1464750] Re: Service accounts can be used to login horizon

2015-06-22 Thread Tristan Cacqueray
** Changed in: ossa Status: Incomplete = Won't Fix ** Information type changed from Private Security to Public ** Also affects: ossn Importance: Undecided Status: New ** Changed in: ossn Status: New = Incomplete -- You received this bug notification because you are a