Policy check is missing for group types
Bug #1616204 reported by
Xing Yang
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Cinder |
Fix Released
|
High
|
Xing Yang |
Bug Description
Group type should only be created and deleted by an admin, however, policy check is missing from the group type APIs. As a result, a non-admin can create a group type.
Policy check should be added to group types to make sure only admin can create and delete a group type.
Changed in cinder: | |
assignee: | nobody → Xing Yang (xing-yang) |
importance: | Undecided → High |
status: | New → In Progress |
milestone: | none → next |
milestone: | next → newton-3 |
Changed in cinder: | |
status: | In Progress → Fix Released |
To post a comment you must log in.
Fix proposed to branch: master /review. openstack. org/359403
Review: https:/