Comment 25 for bug 1498163

Revision history for this message
Mike Fedosin (mfedosin) wrote : Re: Glance storage quota bypass when token is expired

Hi, sorry for late response...

About Hemanth's second comment: but anyway we have to raise Unauthorized exception, as it was done in the other cases, for example here https://github.com/openstack/glance/blob/master/glance/api/v2/images.py#L90
Also it seems that it's more authZ problem rather than AuthN, because authenticated user can't be authorized with expired token.

@Stuart, unfortunately no... To delete files form Multitenant store valid user's token is required. It can't be fixed without trusts. But it's turned off by default and considered as experimental realization, am I right?