Public bug reported:
It is like that because wrong policy RULE_PARENT_OWNER
https://github.com/openstack/neutron/blob/master/neutron/conf/policies/local_ip_association.py#L32
is used in the default policies for those APIs. It should be
PARENT_OWNER_MEMBER for create and delete actions and
PARENT_OWNER_READER for get action.
** Affects: neutron
Importance: High
Assignee: Slawek Kaplonski (slaweq)
Status: Confirmed
** Tags: api
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2125657
Title:
[S-RBAC] User with reader role can create and delete local_ip
association
Status in neutron:
Confirmed
Bug description:
It is like that because wrong policy RULE_PARENT_OWNER
https://github.com/openstack/neutron/blob/master/neutron/conf/policies/local_ip_association.py#L32
is used in the default policies for those APIs. It should be
PARENT_OWNER_MEMBER for create and delete actions and
PARENT_OWNER_READER for get action.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2125657/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
