During R3.0, we had populated perms2 of few objects without ownership set.
When one upgrades from R3.0 to rbac enabled code things would crash for non-admin user.
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/bottle.py", line 856, in _handle
return route.call(**args)
File "/usr/lib/python2.7/dist-packages/bottle.py", line 1721, in wrapper
rv = callback(*a, **ka)
File "/usr/lib/python2.7/dist-packages/vnc_cfg_api_server/vnc_cfg_api_server.py", line 1724, in handler_trap_exception
response = handler(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/cfgm_common/vnc_api_stats.py", line 17, in wrapper
response = func(api_server_obj, resource_type, *args, **kwargs)
File "/usr/lib/python2.7/dist-packages/vnc_cfg_api_server/vnc_cfg_api_server.py", line 666, in http_resource_read
result = self.obj_view(resource_type, result)
File "/usr/lib/python2.7/dist-packages/vnc_cfg_api_server/vnc_cfg_api_server.py", line 701, in obj_view
if self._permissions.check_perms_read(get_request(), l['uuid'], id_perms=uuid_to_perms2[l['uuid']])[0] == True]
File "/usr/lib/python2.7/dist-packages/vnc_cfg_api_server/vnc_perms.py", line 213, in check_perms_read
return self.validate_perms_rbac(request, id, PERMS_R)
File "/usr/lib/python2.7/dist-packages/vnc_cfg_api_server/vnc_perms.py", line 130, in validate_perms_rbac
owner = perms2['owner'].replace('-','')
AttributeError: 'NoneType' object has no attribute 'replace'
(Pdb) pp config
{'fq_name': ['default-domain', 'test-in-network'],
'parent:domain:c63d187b-452b-45df-9224-79400eaa5dad': None,
'parent_type': 'domain',
'prop:display_name': 'test-in-network',
'prop:id_perms': {'created': '2016-03-25T16:44:48.122703',
'creator': None,
'description': None,
'enable': True,
'last_modified': '2016-07-13T20:45:04.238160',
'permissions': {'group': 'cloud-admin-group',
'group_access': 7,
'other_access': 7,
'owner': 'cloud-admin',
'owner_access': 7},
'user_visible': True,
'uuid': {'uuid_lslong': 12354725792060327034L,
'uuid_mslong': 7789700234393373174}},
'prop:perms2': {'global_access': 0,
'owner': None,
'owner_access': 7,
'share': []},
'prop:service_template_properties': {'availability_zone_enable': None,
'flavor': None,
'image_name': None,
'instance_data': None,
'interface_type': [{'service_interface_type': 'left',
'shared_ip': False,
'static_route_enable': False},
{'service_interface_type': 'right',
'shared_ip': False,
'static_route_enable': False}],
'ordered_interfaces': True,
'service_mode': 'in-network',
'service_scaling': True,
'service_type': 'firewall',
'service_virtualization_type': 'virtual-machine',
'version': 2,
'vrouter_instance_type': None},
'type': 'service_template'}
Review in progress for https:/
Submitter: Deepinder Setia (<email address hidden>)