Comment 8 for bug 1400966
Revision history for this message
| Masahito Muroi (muroi-masahito) wrote Re: Glance allows users to download and delete any file in glance-api server | #8 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
73416ba
(Get the code!)
I use v2 like Stuart mentioned in #4.
I realized that user also can get http responses from openstack or no openstack systems in DC. If operators have web based utility tools which don't authorize requests in the DC user can download the info. OpenStack API which require a token with requests don't matter this since glance checks first reachabilities for the location in the location-add.