| 2015-12-30 22:30:04 |
Senthilnathan Murugappan |
description |
A port created under 'admin' tenant can be deleted with creds of 'test-project1' tenant. This shouldnt have worked unless 'test-project1' is under shared list.
root@a2s41:~/master_181215/contrail-test# curl -uadmin:contrail123 http://127.0.0.1:8095/virtual-machine-interface/d1f45946-9f8e-4e62-8e3e-b1f1541592ae | python -m json.tool | grep -3 perms2
"name": "d1f45946-9f8e-4e62-8e3e-b1f1541592ae",
"parent_href": "http://127.0.0.1:8095/project/b105460e-bf4f-4878-af46-f09a9291dd8d",
"parent_type": "project",
"parent_uuid": "b105460e-bf4f-4878-af46-f09a9291dd8d",
"perms2": {
"global_access": 0,
"owner": "b105460ebf4f4878af46f09a9291dd8d",
"owner_access": 7,
"share": []
root@a2s41:~/master_181215/contrail-test# keystone tenant-get b105460ebf4f4878af46f09a9291dd8d
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | |
| enabled | True |
| id | b105460ebf4f4878af46f09a9291dd8d |
| name | admin |
+-------------+----------------------------------+
root@a2s41:~/master_181215/contrail-test# source ~/openstackrc
root@a2s41:~/master_181215/contrail-test# env | grep TENANT
OS_TENANT_NAME=test-project1
root@a2s41:~/master_181215/contrail-test# neutron port-delete d1f45946-9f8e-4e62-8e3e-b1f1541592ae
Deleted port: d1f45946-9f8e-4e62-8e3e-b1f1541592ae |
A port created under 'admin' tenant can be deleted with creds of 'test-project1' tenant. This shouldnt have worked unless 'test-project1' is under shared list.
root@a2s41:~/master_181215/contrail-test# curl -uadmin:contrail123 http://127.0.0.1:8095/virtual-machine-interface/d1f45946-9f8e-4e62-8e3e-b1f1541592ae | python -m json.tool | grep -4 perms2
"name": "d1f45946-9f8e-4e62-8e3e-b1f1541592ae",
"parent_href": "http://127.0.0.1:8095/project/b105460e-bf4f-4878-af46-f09a9291dd8d",
"parent_type": "project",
"parent_uuid": "b105460e-bf4f-4878-af46-f09a9291dd8d",
"perms2": {
"global_access": 0,
"owner": "b105460ebf4f4878af46f09a9291dd8d",
"owner_access": 7,
"share": []
root@a2s41:~/master_181215/contrail-test# keystone tenant-get b105460ebf4f4878af46f09a9291dd8d
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | |
| enabled | True |
| id | b105460ebf4f4878af46f09a9291dd8d |
| name | admin |
+-------------+----------------------------------+
root@a2s41:~/master_181215/contrail-test# source ~/openstackrc
root@a2s41:~/master_181215/contrail-test# env | grep TENANT
OS_TENANT_NAME=test-project1
root@a2s41:~/master_181215/contrail-test# neutron port-delete d1f45946-9f8e-4e62-8e3e-b1f1541592ae
Deleted port: d1f45946-9f8e-4e62-8e3e-b1f1541592ae |
|
