Add resource_filter field in cinder.conf for non-admin user can retrieve volume & snapshot volume

Bug #1802070 reported by KimMinsik
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Cinder
Invalid
High
Ivan Kolodyazhny
OpenStack-Ansible
Fix Released
Undecided
Rajat Dhasmana

Bug Description

Without resource_filters.json, non-admin users cannot retrive volume & snapshot information when they call cinder API over v3.31.
For example, Horizon loggin in non-admin user will return bad request(400) because non-admin user cannot retrive volume & snapshot with filter 'bootable=1&status=available' when cinder.conf do not have 'resource_query_filters_file' field.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-ansible-os_cinder (master)

Fix proposed to branch: master
Review: https://review.openstack.org/616113

Changed in openstack-ansible:
assignee: nobody → KimMinsik (for-beatitudo)
status: New → In Progress
Changed in openstack-ansible:
status: In Progress → New
Mohammed Naser (mnaser)
Changed in openstack-ansible:
status: New → In Progress
Ivan Kolodyazhny (e0ne)
Changed in cinder:
assignee: nobody → Ivan Kolodyazhny (e0ne)
Jay Bryant (jsbryant)
Changed in cinder:
importance: Undecided → High
Revision history for this message
Benjamin (docbakadi) wrote :

Hallo all,

i run into the described problem and hope to get a fix any time soon.
But i see that the config parameter `resource_query_filters_file` is
marked as deprecated.

So my question is, is there another way to achieve this goal so that non admin user
won't get error messages in horizon?

Revision history for this message
Benjamin (docbakadi) wrote :

Ah sry

## Deprecated group/name -...

doesn't mean this parameter is deprecated

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cinder (master)

Fix proposed to branch: master
Review: https://review.openstack.org/629880

Changed in cinder:
status: New → In Progress
Changed in openstack-ansible:
assignee: KimMinsik (for-beatitudo) → Rajat Dhasmana (whoami-rajat)
Revision history for this message
Rajat Dhasmana (whoami-rajat) wrote :

Fix merged for openstack-ansible here https://review.openstack.org/#/c/628197

Changed in openstack-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on cinder (master)

Change abandoned by Ivan Kolodyazhny (<email address hidden>) on branch: master
Review: https://review.opendev.org/629880

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on openstack-ansible-os_cinder (master)

Change abandoned by Dmitriy Rabotyagov (noonedeadpunk) (<email address hidden>) on branch: master
Review: https://review.opendev.org/616113

Revision history for this message
Brian Rosmaita (brian-rosmaita) wrote :

The discussion on https://review.opendev.org/c/openstack/cinder/+/629880 indicates that this is a deployment issue, not a cinder bug. (Plus, the deployment issue has been fixed, so let's close this out.)

Changed in cinder:
status: In Progress → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.