project managers should be able to modify image attributes of an image belonging to the project

[Devin Carlen]

There were some problems with the image detail UI showing edit controls even if the user didn't have rights to modify the image. Nova still prevented the operation, but the UI was giving the option to incorrectly.

The attached diff was the hotfix of this issue. Further logic is needed to check to see if the signed in user is a project manager of the current project in context. In this case, the project manager should be able to modify the image.

Essentially:

IF request.user is projectmanager of image
OR request.user is image.ownerId

However, one place image.ownerId was referenced as a user ID, and another it was referenced as a project ID. We need to find out which it is to properly fix this bug.

[Jesse Andrews (anotherjesse)]

Perhaps the decision on if the edit can occur will be based on RBAC ruleset?

[Gabriel Hurley (gabriel-hurley)]

Bumping to 2012.1 since there's no patch.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/5549

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/5549
Committed: http://github.com/openstack/horizon/commit/2a51171517de2890d26130225a60901827fdfd51
Submitter: Jenkins
Branch: master

commit 2a51171517de2890d26130225a60901827fdfd51
Author: Gabriel Hurley <email address hidden>
Date: Mon Mar 19 18:49:01 2012 -0700

    Corrects glance image action permissions.

      * Admins have full permissions to edit and delete images
        from syspanel, plus Glance's client returns a proper
        403 error instead of 401, so inappropriate access no longer
        logs the user out inappropriately. Fixes bug 955744.
      * Regular users can edit and delete if their tenant owns the
        image. Fixes bug 950364 and fixes bug 737360.

    Note, this requires the latest version of Glance.

    Change-Id: Ib816d7e6e1320a9024c5dbe95b04249291ec0463