Ironic policy file is not valid

Bug #1236371 reported by Roman Prykhodchenko
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ironic
Fix Released
High
Roman Prykhodchenko

Bug Description

The content of the Ironic policy file is not a valid JSON string so it fails to be parsed. This cause that all the requests get rejected with 403, if ACL is enabled.

Fake policy needs to be updated as well.

Tags: api acl
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ironic (master)

Fix proposed to branch: master
Review: https://review.openstack.org/50084

Changed in ironic:
status: New → In Progress
Changed in ironic:
assignee: Roman Prykhodchenko (prykhodchenko) → Devananda van der Veen (devananda)
Changed in ironic:
assignee: Devananda van der Veen (devananda) → Roman Prykhodchenko (prykhodchenko)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ironic (master)

Reviewed: https://review.openstack.org/50084
Committed: http://github.com/openstack/ironic/commit/2d0bc7fd506d1c6000bfff3f8713b36e11ed9776
Submitter: Jenkins
Branch: master

commit 2d0bc7fd506d1c6000bfff3f8713b36e11ed9776
Author: Roman Prykhodchenko <email address hidden>
Date: Mon Oct 7 16:48:06 2013 +0300

    Fix policies

    Policy file contained malformed content so the policy
    engine failed to parse it. That was the reason of rejecting
    all requests, if authentication was enabled.

    This patch also updates policies to get rid of unused policies
    and use GenericCheck to check for admin API.

    After changes mentioned above some unused code appeared in
    ironic.common.policy and so it was cleaned up.

    Closes-bug: #1236371
    Change-Id: Ie1dbda11561a9e7068d240a19f9fb98eae121c94

Changed in ironic:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in ironic:
milestone: none → icehouse-1
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in ironic:
milestone: icehouse-1 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.