Add resource_filter field in cinder.conf for non-admin user can retrieve volume & snapshot volume

Bug #1802070 reported by KimMinsik on 2018-11-07
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Cinder
High
Ivan Kolodyazhny
openstack-ansible
Undecided
Rajat Dhasmana

Bug Description

Without resource_filters.json, non-admin users cannot retrive volume & snapshot information when they call cinder API over v3.31.
For example, Horizon loggin in non-admin user will return bad request(400) because non-admin user cannot retrive volume & snapshot with filter 'bootable=1&status=available' when cinder.conf do not have 'resource_query_filters_file' field.

Fix proposed to branch: master
Review: https://review.openstack.org/616113

Changed in openstack-ansible:
assignee: nobody → KimMinsik (for-beatitudo)
status: New → In Progress
Changed in openstack-ansible:
status: In Progress → New
Mohammed Naser (mnaser) on 2018-11-20
Changed in openstack-ansible:
status: New → In Progress
Ivan Kolodyazhny (e0ne) on 2018-11-21
Changed in cinder:
assignee: nobody → Ivan Kolodyazhny (e0ne)
Jay Bryant (jsbryant) on 2018-11-21
Changed in cinder:
importance: Undecided → High
Benjamin (docbakadi) wrote :

Hallo all,

i run into the described problem and hope to get a fix any time soon.
But i see that the config parameter `resource_query_filters_file` is
marked as deprecated.

So my question is, is there another way to achieve this goal so that non admin user
won't get error messages in horizon?

Benjamin (docbakadi) wrote :

Ah sry

## Deprecated group/name -...

doesn't mean this parameter is deprecated

Fix proposed to branch: master
Review: https://review.openstack.org/629880

Changed in cinder:
status: New → In Progress
Changed in openstack-ansible:
assignee: KimMinsik (for-beatitudo) → Rajat Dhasmana (whoami-rajat)
Rajat Dhasmana (whoami-rajat) wrote :

Fix merged for openstack-ansible here https://review.openstack.org/#/c/628197

Changed in openstack-ansible:
status: In Progress → Fix Released

Change abandoned by Ivan Kolodyazhny (<email address hidden>) on branch: master
Review: https://review.opendev.org/629880

Change abandoned by Dmitriy Rabotyagov (noonedeadpunk) (<email address hidden>) on branch: master
Review: https://review.opendev.org/616113

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers