Backup list API lists all backups in the system

Bug #1169461 reported by Michael Kerrin on 2013-04-16
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Cinder
Undecided
Michael Kerrin

Bug Description

The backup list API is returning all backups in the system. So users will see other users backups and vice versa.

Fix proposed to branch: master
Review: https://review.openstack.org/26989

Changed in cinder:
assignee: nobody → Michael Kerrin (michael-kerrin-w)
status: New → In Progress

To reproduce:

create a backup by two different users on two projects

Run cinder backup-list as any user.

You will see the same output in both

Reviewed: https://review.openstack.org/26989
Committed: http://github.com/openstack/cinder/commit/8f045d2dd2cb84099dd54701e9d27b12a779e191
Submitter: Jenkins
Branch: master

commit 8f045d2dd2cb84099dd54701e9d27b12a779e191
Author: Michael Kerrin <email address hidden>
Date: Tue Apr 16 08:09:35 2013 +0000

    Cinder wasn't filtering the backups returned to backup list API

    This has the side effect of return all backups in the system (regardless of
    who created them) to the user. You should only see the backups created in your
    current active project.

    Fixes bug: 1169461

    Change-Id: I121e8ed215b28f1b21e24b2104f8294039e09b48

Changed in cinder:
status: In Progress → Fix Committed

I am out of the office until 05/12/2013.

For technical issues regarding the Storwize/SVC Cinder driver, please
contact: Jie Ping Wu <email address hidden>, Li Min Liu <email address hidden>,
Ronen Kat <email address hidden>
For all other issue, please contact my manager, Dalit Naor
<email address hidden>

Note: This is an automated response to your message "[Bug 1169461] Re:
Backup list API lists all backups in the system" sent on 26/04/2013
20:00:58.

This is the only notification you will receive while this person is away.

Thierry Carrez (ttx) on 2013-05-29
Changed in cinder:
milestone: none → havana-1
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2013-10-17
Changed in cinder:
milestone: havana-1 → 2013.2
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers