OpenStack Compute (nova)

Nova Compute API should use 403, not 401

Bug #921744 reported by Brian Waldon
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Fix Released
Low
Brian Waldon
OpenStack Compute (nova) 2012.1 "essex"

Bug Description

We need to change our 401 responses to 403 in the cases that we reject based on our policy rules. 401 implies that the user is unrecognized and needs to reauthenticate. 403 means that the authenticated user is not allowed to perform the requested action and should not try again. For the technical definitions: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to nova (master)

Fix proposed to branch: master
Review: https://review.openstack.org/3418

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to nova (master)

Reviewed: https://review.openstack.org/3418
Committed: http://github.com/openstack/nova/commit/4a04d297bdd276b7bd9fbd1565c9c7dcfc87ee95
Submitter: Jenkins
Branch: master

commit 4a04d297bdd276b7bd9fbd1565c9c7dcfc87ee95
Author: Brian Waldon <email address hidden>
Date: Wed Jan 25 10:37:33 2012 -0800

    Return 403 instead of 401 when policies reject

    Fixes bug 921744

    Change-Id: Ib4b6405dffa3ee2e8ef2b8a7710124f97f0fdf43

Changed in nova:
status: In Progress → Fix Committed
Vish Ishaya (vishvananda)
Changed in nova:
milestone: essex-4 → essex-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to nova (milestone-proposed)

Fix proposed to branch: milestone-proposed
Review: https://review.openstack.org/3453

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to nova (milestone-proposed)

Reviewed: https://review.openstack.org/3453
Committed: http://github.com/openstack/nova/commit/6fdd1f6215756422068ad112509de5d7be057373
Submitter: Jenkins
Branch: milestone-proposed

commit 6fdd1f6215756422068ad112509de5d7be057373
Author: Brian Waldon <email address hidden>
Date: Wed Jan 25 10:37:33 2012 -0800

    Return 403 instead of 401 when policies reject

    Fixes bug 921744

    Change-Id: Ib4b6405dffa3ee2e8ef2b8a7710124f97f0fdf43

Changed in nova:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in nova:
milestone: essex-3 → 2012.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.