nova server_list called incorrectly in quota.py

Bug #1468551 reported by David Lyle
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Fix Released
High
David Lyle

Bug Description

A recent change fixed a role leak in nova https://github.com/openstack/nova/commit/55e63f83a7caec5a8d85b7532c501e1b846295ba changed the default policy for "compute:get_all_tenants" policy rule. This exposes that quotas.py is passing incorrect parameters using "all_tenants=True".

The result for non-admin users is:

Forbidden at /project/network_topology/

Policy doesn't allow compute:get_all_tenants to be performed. (HTTP 403)

Tags: nova
David Lyle (david-lyle)
description: updated
Changed in horizon:
status: New → In Progress
Changed in horizon:
status: In Progress → Fix Committed
Changed in horizon:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in horizon:
milestone: liberty-2 → 8.0.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.