Unprivileged user can't access to its Gnocchi resources created by Ceilometer

[Mehdi Abaakouk]

When an unprivileged user want to access to Gnocchi resources
created by Ceilometer, that doesn't work because the filter scope
the Gnocchi query to resource owner to the user.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/482946

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/newton
Review: https://review.openstack.org/482947

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/482946
Committed: https://git.openstack.org/cgit/openstack/aodh/commit/?id=6aee6e1700276a52553c63b0fee8274f0560514f
Submitter: Jenkins
Branch: stable/ocata

commit 6aee6e1700276a52553c63b0fee8274f0560514f
Author: Mehdi Abaakouk <email address hidden>
Date: Mon Jun 12 10:27:23 2017 +0200

    gnocchi: fix alarms for unpriviledged user

    When an unprivileged user want to access to Gnocchi resources
    created by Ceilometer, that doesn't work because the filter scope
    the Gnocchi query to resource owner to the user. To fix we introduce
    a new configuration option "gnocchi_external_project_owner" set by
    default to "service". The new filter now allow two kind of Gnocchi
    resources:
    * owned by the user project
    * owned by "gnocchi_external_project_owner" and the orignal project_id
      of the resource is the user project.

    Closes-bug: #1703824
    Change-Id: I0c86736a902a21520da18550aea0a7d1549bb24e
    (cherry picked from commit b0bdd43209a47181a8124e28990127620cba03a7)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/482947
Committed: https://git.openstack.org/cgit/openstack/aodh/commit/?id=f87e0d05c4662c14c7a9f49a0a829cf9bf3edbdb
Submitter: Jenkins
Branch: stable/newton

commit f87e0d05c4662c14c7a9f49a0a829cf9bf3edbdb
Author: Mehdi Abaakouk <email address hidden>
Date: Mon Jun 12 10:27:23 2017 +0200

    gnocchi: fix alarms for unpriviledged user

    When an unprivileged user want to access to Gnocchi resources
    created by Ceilometer, that doesn't work because the filter scope
    the Gnocchi query to resource owner to the user. To fix we introduce
    a new configuration option "gnocchi_external_project_owner" set by
    default to "service". The new filter now allow two kind of Gnocchi
    resources:
    * owned by the user project
    * owned by "gnocchi_external_project_owner" and the orignal project_id
      of the resource is the user project.

    Closes-bug: #1703824
    Change-Id: I0c86736a902a21520da18550aea0a7d1549bb24e
    (cherry picked from commit b0bdd43209a47181a8124e28990127620cba03a7)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/aodh 4.0.1 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/aodh 3.0.3 release.