Neutron loading policy file too early
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Fix Released
|
Medium
|
Vincent Untz |
Bug Description
From time to time, I could see that "neutron net-external-list" was returning something empty for a non-admin user while this is not true on my setup.
After quite some debugging, it turned out that it was failing because of the policy (using the default policy.json, btw):
"get_network": "rule:admin_
This was not returning true. Clearly, "rule:external" should have (as a reminder, this rule is: "external": "field:
After more debugging, I found out that the field check was comparing u'True' with True. That is, the "True" that is in rule:external was a unicode, and not a boolean.
Looking at extensions/
Adding more debug output, I found out that the policies were loaded before the external-net extension was loaded. Therefore, the convert_to field wasn't available yet, and so the conversion to false wasn't true.
This all happened because there was some handling of an event before the external-net extension was loaded, causing the policy file to be loaded a bit too early.
tags: | added: havana-backport-potential |
Changed in neutron: | |
milestone: | none → icehouse-3 |
Changed in neutron: | |
milestone: | icehouse-3 → icehouse-rc1 |
Changed in neutron: | |
status: | Fix Committed → Fix Released |
Changed in neutron: | |
milestone: | icehouse-rc1 → 2014.1 |
Fix proposed to branch: master /review. openstack. org/73866
Review: https:/