RBAC policy validation doesn't aware of environment
Bug #1569307 reported by
Oleksii Chuprykov
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Heat |
New
|
Undecided
|
Oleksii Chuprykov | ||
Bug Description
oleksii@ubuntu:~$ cat nova.yaml
heat_template_
resources:
test_flavor:
type: OS::MyRes:
properties:
disk: 20
ram: 512
vcpus: 1
oleksii@ubuntu:~$ cat env.yaml
resource_registry:
OS:
Execute by non-admin user:
heat stack-create test -f nova.yaml -e env.yaml
This action doesn't fail in validation time and trying to create nova flavor instead. We should check real type of a resource, not a type name/alias that can be redefined by env.
| Changed in heat: | |
| assignee: | nobody → Oleksii Chuprykov (ochuprykov) |
| Changed in heat: | |
| milestone: | none → no-priority-tag-bugs |
To post a comment you must log in.
