Comment 0 for bug 1468551

Revision history for this message
David Lyle (david-lyle) wrote :

A recent change fixed a role leak in nova https://github.com/openstack/nova/commit/55e63f83a7caec5a8d85b7532c501e1b846295ba changed the default policy for "compute:get_all_tenants" policy rule. This exposes that quotas.py is passing incorrect parameters using "all_tenants=True".

The result is:

Forbidden at /project/network_topology/

Policy doesn't allow compute:get_all_tenants to be performed. (HTTP 403)