[RBAC] Update "subnet" policies

Bug #2038646 reported by Rodolfo Alonso
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Medium
Rodolfo Alonso

Bug Description

* "get_subnet"
Currently only the admin or a project reader can get a subnet. However, it doesn't make sense that the net owner can create the subnet [1] but cannot list it.

* "update_subnet"
Currently only the admin and the network owner can modify the subnet. Any project member should be able too.

* "delete_subnet"
Same argument as in "update_subnet"

[1]https://github.com/openstack/neutron/blob/8cba97016e421e4b01b96de70b4b194972d0186f/neutron/conf/policies/subnet.py#L42-L43

Changed in neutron:
importance: Undecided → Low
assignee: nobody → Rodolfo Alonso (rodolfo-alonso-hernandez)
importance: Low → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/neutron/+/897540

Changed in neutron:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/897540
Committed: https://opendev.org/openstack/neutron/commit/294e1c60b41d3422bb830758e2ea6b6cf554ac46
Submitter: "Zuul (22348)"
Branch: master

commit 294e1c60b41d3422bb830758e2ea6b6cf554ac46
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Thu Oct 5 19:32:32 2023 +0000

    [RBAC] Update the subnet policies

    * get_subnet: the network owner can retrieve the subnet too.
    * update_subnet: any project member can update the subnet.
    * delete_subnet: any project member can delete the subnet.

    Closes-Bug: #2038646
    Change-Id: Iae2e3a31eb65d68dc0d3d0f9dd9fc8cf83260769

Changed in neutron:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/neutron 24.0.0.0b1

This issue was fixed in the openstack/neutron 24.0.0.0b1 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.