Quota Update API does not Require a Quota Value to Update

Bug #1778975 reported by Dustin Schoenbrun
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Cinder
New
Undecided
Unassigned
OpenStack Shared File Systems Service (Manila)
Fix Released
Low
Felipe Rodrigues

Bug Description

With both the CLI and APIs for updating quotas of at least Cinder and Manila it is possible to create a request with a body that does not change any quota. This is partially because the options to these APIs are all optional and the API layer (nor the CLI) does not do any validation of the body of the request to ensure there is actually something to do.

Versions:
Appears to impact Master as well as at least Queens.

Steps to Reproduce:
1) Set up Cinder and/or Manila.
2) Using the "manila|cinder quota-update" command, attempt to update a quota while supplying only a project to update.
3) Observe that without specifying a quota to update the request was still successful.

Observed Results:
The empty quota update request completes without error.

Expected Results:
The empty quota request should either generate an error saying that there was nothing given to update or a warning stating the same.

Tags: quotas
summary: - Quota Update API does not Require a Quota to Update
+ Quota Update API does not Require a Quota Value to Update
Tom Barron (tpb)
tags: added: quotas
Revision history for this message
Tom Barron (tpb) wrote :

We may be able to address issues of this sort via the proposed json schema validation - initial patch at https://review.openstack.org/#/c/563429/

Tom Barron (tpb)
Changed in manila:
milestone: rocky-2 → none
wiley (gfhjgfhdfjd)
summary: - Quota Update API does not Require a Quota Value to Update
+ Buy Xanax 1mg Online To Deal With Anxiety Attacks
description: updated
summary: - Buy Xanax 1mg Online To Deal With Anxiety Attacks
+ Buy Xanax Online To Deal With Anxiety Attacks
Colin Watson (cjwatson)
description: updated
summary: - Buy Xanax Online To Deal With Anxiety Attacks
+ Quota Update API does not Require a Quota Value to Update
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-cinderclient 5.0.0

This issue was fixed in the openstack/python-cinderclient 5.0.0 release.

Changed in manila:
assignee: nobody → Felipe Rodrigues (felipefutty)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/manila/+/798206

Changed in manila:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (master)

Reviewed: https://review.opendev.org/c/openstack/manila/+/798206
Committed: https://opendev.org/openstack/manila/commit/c07f2d8ba8c97294858af1fb6388135de17b509d
Submitter: "Zuul (22348)"
Branch: master

commit c07f2d8ba8c97294858af1fb6388135de17b509d
Author: Felipe Rodrigues <email address hidden>
Date: Wed Apr 1 19:50:58 2020 +0000

    Fix quota-set no required parameters on update

    Fixes an issue on manila api while trying to update a quota
    without specifying a value.

    Change-Id: I660a0f703edf8bfd91f78ed1b0c258828a1d12a2
    Closes-Bug: #1778975

Changed in manila:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/manila 14.0.0.0rc1

This issue was fixed in the openstack/manila 14.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.