Glance

  1. Series grizzly
  2. Bug #1065187
  3. Comment #18

Comment 18 for bug 1065187

Revision history for this message
Thierry Carrez (ttx) wrote : Re: Non-admin users can cause public glance images to be deleted from the backend storage repository

Just looking at the code Essex (and Diablo) seem to be vulnerable in case you don't use delayed_delete. If you do, the code will return 403 but I'm not sure it won't still delete the image (after the delay) ?