Ability to specify a host using --availability_zone is restricted to admin context

Bug #1070880 reported by David McNally
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Fix Released
Undecided
David McNally

Bug Description

There is functionality in place, which uses the format "az:host" on the --availability_zone parameter to a create request to force scheduling of an instance onto a specific host. However, this is limited to users with Admin context.
If this was altered to use a specific policy action it would allow more fine-grained control over which users have access to this functionality.

Changed in nova:
assignee: nobody → David McNally (dave-mcnally)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to nova (master)

Fix proposed to branch: master
Review: https://review.openstack.org/14769

Changed in nova:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to nova (master)

Reviewed: https://review.openstack.org/14769
Committed: http://github.com/openstack/nova/commit/f17ebebcf76bafb8250e84227dd244f520904072
Submitter: Jenkins
Branch: master

commit f17ebebcf76bafb8250e84227dd244f520904072
Author: David McNally <email address hidden>
Date: Wed Oct 24 16:39:29 2012 +0100

    Ability to specify a host restricted to admin.

    Fixes bug 1070880

    There is functionality in place, which uses the
    format "az:host" on the --availability_zone
    parameter to a create request to force scheduling
    of an instance onto a specific host. However,
    this is limited to users with Admin context.

    This fix alters this behaviour to use a specific
    policy action allowing fine-grained control over
    which users have access to this functionality.

    Change-Id: Ibb0e43492dfa2699ab26318736ca55a60b7b4468

Changed in nova:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in nova:
milestone: none → grizzly-1
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in nova:
milestone: grizzly-1 → 2013.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.