Comment 11 for bug 1400966

Revision history for this message
Stuart McLaren (stuart-mclaren) wrote : Re: Glance allows users to download and delete any file in glance-api server

Yes, I was also thinking adding the v1 style limitation to v2 is probably a good idea.

I'd also like to see the set and get location policies default to admin only -- what do others think about that? (IMHO playing directly with the locations should be something that power users 'opt in' to be able to do.)