OpenStack Shared File Systems Service (Manila)

  1. Bug #1861485
  2. Comment #1

Comment 1 for bug 1861485

Revision history for this message
Mohammed Naser (mnaser) wrote : Re: User knowing the id of a share network can show, delete, create share on a share network owned by different tenant

I can confirm this as well on my side. The reason is that there is absolutely no checks for ownership here:

https://github.com/openstack/manila/blob/master/manila/api/v2/share_networks.py#L60
https://github.com/openstack/manila/blob/master/manila/api/v2/share_networks.py#L79

I'm working on some tests that fix this and will post them privately.