Comment 13 for bug 1065187

Revision history for this message
Thierry Carrez (ttx) wrote : Re: Non-admin users can cause public glance images to be deleted from the backend storage repository

OK, time to make progress on this... adding glance-core to the mix.

We need from Glance core:
* Formal pre-approval on the proposed patch (comment 8) -- currently it has one +1 from Brian
* confirmation that Diablo and Essex are vulnerable
* backported patches for Essex if vulnerable

Then the VMT will:
* Draft an impact description
* Pull stable/diablo team in if Diablo is affected
* Push the proposed fixes downstream