| 2015-06-24 23:37:34 |
David Lyle |
description |
A recent change fixed a role leak in nova https://github.com/openstack/nova/commit/55e63f83a7caec5a8d85b7532c501e1b846295ba changed the default policy for "compute:get_all_tenants" policy rule. This exposes that quotas.py is passing incorrect parameters using "all_tenants=True".
The result is:
Forbidden at /project/network_topology/
Policy doesn't allow compute:get_all_tenants to be performed. (HTTP 403) |
A recent change fixed a role leak in nova https://github.com/openstack/nova/commit/55e63f83a7caec5a8d85b7532c501e1b846295ba changed the default policy for "compute:get_all_tenants" policy rule. This exposes that quotas.py is passing incorrect parameters using "all_tenants=True".
The result for non-admin users is:
Forbidden at /project/network_topology/
Policy doesn't allow compute:get_all_tenants to be performed. (HTTP 403) |
|
