commit db7c4827410ee650524c886b85be3cd0ae7178b3
Author: Goutham Pacha Ravi <email address hidden>
Date: Wed Sep 14 22:13:11 2022 -0700
[RBAC] Return 404 if share is inaccessible
When a user is prevented from listing a non-public
share, the API service would return a 403 Forbidden.
This isn't consistent with the API SIG's guidance
on resources restricted by virtue of RBAC policy since
users with malicious intent may use the signal to
mean that the resource exists.
Depends-On: I27fdd7dfffeb15965b66dbb3f6b1568c11ff9ad4
Change-Id: I7e05dcb343c932cc7fec8d395919053d0a1801ce
Closes-Bug: #1901210
Signed-off-by: Goutham Pacha Ravi <email address hidden>
(cherry picked from commit 6303741be2394de9301f03f28f7ad20216aad7f6)
(cherry picked from commit 078bc4300a93e61c22b4958d87e034a707a700a1)
(cherry picked from commit dfb4e7ee93d4893fab19e6bf4f989483ef3bef6f)
(cherry picked from commit 5b8b7b19fd3cda9e2b3f573cdd9e704d1cca8cb0)
(cherry picked from commit 2e420aa5b7523e6c37c16baac18843fee2f15b57)
Reviewed: https:/ /review. opendev. org/c/openstack /manila/ +/859239 /opendev. org/openstack/ manila/ commit/ db7c4827410ee65 0524c886b85be3c d0ae7178b3
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/victoria
commit db7c4827410ee65 0524c886b85be3c d0ae7178b3
Author: Goutham Pacha Ravi <email address hidden>
Date: Wed Sep 14 22:13:11 2022 -0700
[RBAC] Return 404 if share is inaccessible
When a user is prevented from listing a non-public
share, the API service would return a 403 Forbidden.
This isn't consistent with the API SIG's guidance
on resources restricted by virtue of RBAC policy since
users with malicious intent may use the signal to
mean that the resource exists.
Depends-On: I27fdd7dfffeb15 965b66dbb3f6b15 68c11ff9ad4 cc7fec8d3959190 53d0a1801ce 9301f03f28f7ad2 0216aad7f6) c22b4958d87e034 a707a700a1) fab19e6bf4f9894 83ef3bef6f) e2b3f573cdd9e70 4d1cca8cb0) c37c16baac18843 fee2f15b57)
Change-Id: I7e05dcb343c932
Closes-Bug: #1901210
Signed-off-by: Goutham Pacha Ravi <email address hidden>
(cherry picked from commit 6303741be2394de
(cherry picked from commit 078bc4300a93e61
(cherry picked from commit dfb4e7ee93d4893
(cherry picked from commit 5b8b7b19fd3cda9
(cherry picked from commit 2e420aa5b7523e6