Public bug reported:

Glance currently has a flag to gate multiple locations from being sent
back to the user. It also has a policy rule to prevent non-admin from
receiving such locations. Having both is redundant and it's caused
issues in the past.

Let's get rid of the config option and rely on a more granular control
using policies. This requires making the following policies admin only
by default:

    "delete_image_location": "",
    "get_image_location": "",
    "set_image_location": "",

** Affects: glance
     Importance: Undecided
         Status: New


** Tags: spec-lite

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1535437

Title:
  Deprecate `show_multiple_locations` in favor of policy

Status in Glance:
  New

Bug description:
  Glance currently has a flag to gate multiple locations from being sent
  back to the user. It also has a policy rule to prevent non-admin from
  receiving such locations. Having both is redundant and it's caused
  issues in the past.

  Let's get rid of the config option and rely on a more granular control
  using policies. This requires making the following policies admin only
  by default:

      "delete_image_location": "",
      "get_image_location": "",
      "set_image_location": "",

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1535437/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to