Admin portion of the API requires RBAC
Bug #1266454 reported by
Flavio Percoco
This bug affects 2 people
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| zaqar |
Invalid
|
High
|
Unassigned | ||
Bug Description
Enforce AuthZ for the admin portion of the API, meaning only users with some specific Keystone roles, as configured in marconi.conf, should be able to access the control plane.
| Changed in marconi: | |
| importance: | Undecided → High |
| assignee: | nobody → Flavio Percoco (flaper87) |
| milestone: | none → icehouse-2 |
Revision history for this message
| OpenStack Infra (hudson-openstack) wrote Fix proposed to marconi (master) | #1 |
| Changed in marconi: | |
| status: | New → In Progress |
Revision history for this message
| Kurt Griffiths (kgriffs) wrote Re: Health endpoint should be admin only | #2 |
| no longer affects: | marconi/icehouse |
| Changed in marconi: | |
| milestone: | icehouse-3 → none |
| summary: |
- Health endpoint should be admin only + Admin portion of the API requires RBAC |
Revision history for this message
| Kurt Griffiths (kgriffs) wrote | #3 |
| Changed in marconi: | |
| status: | In Progress → Triaged |
| description: | updated |
Revision history for this message
| Flavio Percoco (flaper87) wrote | #4 |
| no longer affects: | marconi/juno |
| Changed in marconi: | |
| milestone: | juno-3 → none |
| assignee: | Flavio Percoco (flaper87) → nobody |
To post a comment you must log in.
Fix proposed to branch: master
Review: https:/