Glance

Glance needs a policy for image download

Bug #1038086 reported by Brian Waldon on 2012-08-17

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	Glance	Fix Released	Critical	Alex Meade	Glance 2012.2 "folsom"

Bug Description

The v2 API needs to be able to check a policy when serving image data - probably called 'image_download' defaulting to allow. The docs page policies.rst needs to be updated as well.

See original description

Brian Waldon (bcwaldon) on 2012-08-17

description:	updated
description:	updated
description:	updated

Alex Meade (alex-meade) on 2012-08-17

Changed in glance:
assignee:	nobody → Alex Meade (alex-meade)

Alex Meade (alex-meade) on 2012-08-19

Changed in glance:
status:	Triaged → In Progress

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2012-08-20: Fix proposed to glance (master)

Fix proposed to branch: master
Review: https://review.openstack.org/11660

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2012-08-21: Fix merged to glance (master)

Reviewed: https://review.openstack.org/11660
Committed: http://github.com/openstack/glance/commit/75339f4712314c65fe0f0ddc3bcec691a725bc99
Submitter: Jenkins
Branch: master

commit 75339f4712314c65fe0f0ddc3bcec691a725bc99
Author: Alex Meade <email address hidden>
Date: Mon Aug 20 10:44:13 2012 -0400

Add policy check for downloading image.

This patch adds a policy, 'download_image', to be enforced when image data is
retrieved. It also does some basic refactoring of how policies are enforced.

Fixes bug 1038086

Change-Id: Idd844b615d362eae3197e106067c29dba8e3eeda