Comment 0 for bug 1770181

Using both the glance CLI or the OpenStack web UI, I cannot create an image with public visibility nor can I update an image to have public visibility.

Why am I provided with this option if I can never do it?
Why is it not allowed?
Why does the UI allow me to attempt the action and then provide an error message with no information about what the problem is?

If I attempt to do the action with glance `glance image-create --name foo --visibility public ...` or `glance image-update --visibility public ...` it at least gives me a 403 forbidden.

The web UI just gives a generic "Error" message with no information.

From searching around on the web, it looks like this feature has not been available for maybe even 4 years! See: https://www.sebastien-han.fr/blog/2014/10/30/openstack-glance-allow-user-to-create-public-images/

This user seems to have run into this problem two years ago: https://ask.openstack.org/en/question/96438/glance-public-image-create-403-forbidden-you-are-not-authorized-to-complete-this-action-http-403-error-in-openstack-mitaka/

I can only think this has never been tested as a non admin user, and that perhaps something different happens when you have more permissions than I have. Really, I want to be able to do this. But if I am not allowed, I at least want to know why!