Public bug reported: Panels listing of below are not set proper policy rules. These are only set a permission of service. Therefore if service is enable but a user don't have a privilege by policy.json, a user will be able to display its page but an API error will occur. I think we should address it like a "projects" panel.
openstack_dashboard/dashboards/admin/aggregates/panel.py openstack_dashboard/dashboards/admin/defaults/panel.py openstack_dashboard/dashboards/admin/flavors/panel.py openstack_dashboard/dashboards/admin/hypervisors/panel.py openstack_dashboard/dashboards/admin/images/panel.py openstack_dashboard/dashboards/admin/info/panel.py openstack_dashboard/dashboards/admin/instances/panel.py openstack_dashboard/dashboards/admin/metadata_defs/panel.py openstack_dashboard/dashboards/admin/networks/panel.py openstack_dashboard/dashboards/admin/routers/panel.py openstack_dashboard/dashboards/admin/volumes/panel.py openstack_dashboard/dashboards/project/access_and_security/panel.py openstack_dashboard/dashboards/project/firewalls/panel.py openstack_dashboard/dashboards/project/images/panel.py openstack_dashboard/dashboards/project/instances/panel.py openstack_dashboard/dashboards/project/loadbalancers/panel.py openstack_dashboard/dashboards/project/network_topology/panel.py openstack_dashboard/dashboards/project/networks/panel.py openstack_dashboard/dashboards/project/ngimages/panel.py openstack_dashboard/dashboards/project/overview/panel.py openstack_dashboard/dashboards/project/routers/panel.py openstack_dashboard/dashboards/project/stacks/panel.py openstack_dashboard/dashboards/project/stacks/resource_types/panel.py ** Affects: horizon Importance: Undecided Assignee: Kenji Ishii (ken-ishii) Status: New ** Changed in: horizon Assignee: (unassigned) => Kenji Ishii (ken-ishii) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Dashboard (Horizon). https://bugs.launchpad.net/bugs/1534495 Title: Some panels is not set proper policy rules Status in OpenStack Dashboard (Horizon): New Bug description: Panels listing of below are not set proper policy rules. These are only set a permission of service. Therefore if service is enable but a user don't have a privilege by policy.json, a user will be able to display its page but an API error will occur. I think we should address it like a "projects" panel. openstack_dashboard/dashboards/admin/aggregates/panel.py openstack_dashboard/dashboards/admin/defaults/panel.py openstack_dashboard/dashboards/admin/flavors/panel.py openstack_dashboard/dashboards/admin/hypervisors/panel.py openstack_dashboard/dashboards/admin/images/panel.py openstack_dashboard/dashboards/admin/info/panel.py openstack_dashboard/dashboards/admin/instances/panel.py openstack_dashboard/dashboards/admin/metadata_defs/panel.py openstack_dashboard/dashboards/admin/networks/panel.py openstack_dashboard/dashboards/admin/routers/panel.py openstack_dashboard/dashboards/admin/volumes/panel.py openstack_dashboard/dashboards/project/access_and_security/panel.py openstack_dashboard/dashboards/project/firewalls/panel.py openstack_dashboard/dashboards/project/images/panel.py openstack_dashboard/dashboards/project/instances/panel.py openstack_dashboard/dashboards/project/loadbalancers/panel.py openstack_dashboard/dashboards/project/network_topology/panel.py openstack_dashboard/dashboards/project/networks/panel.py openstack_dashboard/dashboards/project/ngimages/panel.py openstack_dashboard/dashboards/project/overview/panel.py openstack_dashboard/dashboards/project/routers/panel.py openstack_dashboard/dashboards/project/stacks/panel.py openstack_dashboard/dashboards/project/stacks/resource_types/panel.py To manage notifications about this bug go to: https://bugs.launchpad.net/horizon/+bug/1534495/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp