Juniper Openstack

rbac: object count as member gives count of an object in the entire cluster rather than project alone

Bug #1650404 reported by Senthilnathan Murugappan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.2
New
Medium
Deepinder Setia
R4.0
Fix Committed
Medium
Deepinder Setia
Juniper Openstack r4.0.0.0-fcs "r4.0.0.0"
Trunk
Fix Committed
Medium
Deepinder Setia
Juniper Openstack r4.1.0.0-fcs "r4.1"

Bug Description

The virtual network count should have been 1 in the below case rather than 10.

root@a2s40:~# neutron --os-username test1 --os-password test1 net-list
+--------------------------------------+------+---------+
| id | name | subnets |
+--------------------------------------+------+---------+
| 6b250c2c-5e89-4ba3-bf64-4775d939542e | net1 | |
+--------------------------------------+------+---------+

root@a2s40:~# curl -H 'X-Auth-Token: 16231b7fc52646a0b3bf7140fa692c52' http://127.0.0.1:9100/virtual-networks?count=True
{"virtual-networks": {"count": 10}}

Tags: config rbac
Senthilnathan Murugappan (msenthil)
tags: added: rbac
Jeba Paulaiyan (jebap)
tags: added: config
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/30870
Submitter: Deepinder Setia (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R4.0

Review in progress for https://review.opencontrail.org/31277
Submitter: Deepinder Setia (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/30870
Committed: http://github.com/Juniper/contrail-controller/commit/e16c0b13c0dd039c8d1b98d6bb8201e1e40d8234
Submitter: Zuul (<email address hidden>)
Branch: master

commit e16c0b13c0dd039c8d1b98d6bb8201e1e40d8234
Author: Deepinder Setia <email address hidden>
Date: Fri Apr 28 16:13:49 2017 -0700

Object count for a non-admin user should be subject to what user
can actually see based on credentials

Change-Id: I3c28416c2e5d6c0b576d7dc953cdacf5444ea7a7
Closes-bug: #1650404

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote :

Reviewed: https://review.opencontrail.org/31277
Committed: http://github.com/Juniper/contrail-controller/commit/bdcc06b5536143137be730842b5f6f57ff9e51bb
Submitter: Zuul (<email address hidden>)
Branch: R4.0

commit bdcc06b5536143137be730842b5f6f57ff9e51bb
Author: Deepinder Setia <email address hidden>
Date: Fri Apr 28 16:13:49 2017 -0700

Object count for a non-admin user should be subject to what user
can actually see based on credentials

Change-Id: I3c28416c2e5d6c0b576d7dc953cdacf5444ea7a7
Closes-bug: #1650404

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.