project _memeber_ type users cannot read their quotas

Bug #1462428 reported by Eric Peterson
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Designate
Fix Released
High
Unassigned

Bug Description

When users / clients without an admin token make this call:

https://github.com/openstack/python-designateclient/blob/master/designateclient/v1/quotas.py#L26

It eventually fails in the central log with a message that looks like:

2015-06-05 15:58:37.071 24238 INFO designate.policy [req-66dd0126-890b-413c-8133-dfe9cfae08e0 f3b9d089c4034398874e9fcf1a48fa97 dbc2e327b3204978b7a3292f6b7f15ec - - -] Policy check succeeded for rule 'get_quotas' on target {'tenant_id': u'dbc2e327b3204978b7a3292f6b7f15ec'}
2015-06-05 15:58:37.073 24238 INFO designate.policy [req-66dd0126-890b-413c-8133-dfe9cfae08e0 f3b9d089c4034398874e9fcf1a48fa97 dbc2e327b3204978b7a3292f6b7f15ec - - -] Policy check failed for rule 'all_tenants' on target {}

This makes quotas kind of useless, if the only people that can read them are admins (which would be the same users that can change them).

tags: added: central
Tim Simmons (timsim)
Changed in designate:
status: New → Triaged
importance: Undecided → High
milestone: none → liberty-1
Kiall Mac Innes (kiall)
tags: added: low-hanging-fruit
Changed in designate:
assignee: nobody → pradeep kumar singh (pradeep-singh-u)
Thierry Carrez (ttx)
Changed in designate:
milestone: liberty-1 → liberty-2
Changed in designate:
status: Triaged → In Progress
Revision history for this message
Pradeep Kumar Singh (pradeep-singh-u) wrote :
Kiall Mac Innes (kiall)
Changed in designate:
milestone: liberty-2 → liberty-3
Kiall Mac Innes (kiall)
Changed in designate:
milestone: liberty-3 → liberty-rc1
Revision history for this message
Kiall Mac Innes (kiall) wrote :

Pushing out as we're at Liberty RCs, users can use the "limits" endpoint to retrieve their own quotas for now.

Changed in designate:
milestone: liberty-rc1 → none
Changed in designate:
assignee: Pradeep Kumar Singh (pradeep-singh-u) → nobody
Changed in designate:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on designate (master)

Change abandoned by Graham Hayes (<email address hidden>) on branch: master
Review: https://review.openstack.org/195368
Reason: As this review has not been updated recently, we are abandoning it for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.