[Secure RBAC] Sharing QoS Policies don't works with new RBAC policies

Bug #2004014 reported by Slawek Kaplonski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
High
Slawek Kaplonski

Bug Description

Failed tests:
neutron_tempest_plugin.api.test_qos.QosTestJSON.test_get_policy_that_is_shared
neutron_tempest_plugin.api.test_qos.RbacSharedQosPoliciesTest.test_policy_sharing_with_wildcard
neutron_tempest_plugin.api.test_qos.RbacSharedQosPoliciesTest.test_policy_sharing_with_wildcard_and_project_id
neutron_tempest_plugin.api.test_qos.RbacSharedQosPoliciesTest.test_regular_client_shares_to_another_regular_client

Error example:

Traceback (most recent call last):
  File "/opt/stack/tempest/.tox/tempest/lib/python3.8/site-packages/neutron_tempest_plugin/api/test_qos.py", line 400, in test_get_policy_that_is_shared
    obtained_policy = self.client.show_qos_policy(policy['id'])['policy']
  File "/opt/stack/tempest/.tox/tempest/lib/python3.8/site-packages/neutron_tempest_plugin/services/network/json/network_client.py", line 133, in _show
    resp, body = self.get(uri)
  File "/opt/stack/tempest/tempest/lib/common/rest_client.py", line 314, in get
    return self.request('GET', url, extra_headers, headers)
  File "/opt/stack/tempest/tempest/lib/common/rest_client.py", line 720, in request
    self._error_checker(resp, resp_body)
  File "/opt/stack/tempest/tempest/lib/common/rest_client.py", line 826, in _error_checker
    raise exceptions.NotFound(resp_body, resp=resp)
tempest.lib.exceptions.NotFound: Object not found
Details: {'type': 'HTTPNotFound', 'message': 'The resource could not be found.', 'detail': ''}

Changed in neutron:
status: Confirmed → In Progress
Revision history for this message
Slawek Kaplonski (slaweq) wrote :
Changed in neutron:
assignee: nobody → Slawek Kaplonski (slaweq)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/872396
Committed: https://opendev.org/openstack/neutron/commit/221cf9497fed414b01206ece6c6d41d0ec7d4088
Submitter: "Zuul (22348)"
Branch: master

commit 221cf9497fed414b01206ece6c6d41d0ec7d4088
Author: Slawek Kaplonski <email address hidden>
Date: Wed Feb 1 11:25:04 2023 +0100

    [Secure RBAC] Add shared_qos_policy rule

    For shared QoS policies we need to have additional rule which will allow
    to list shared policies for projects which aren't owners of the QoS
    policy.

    Closes-bug: #2004013
    Closes-bug: #2004014
    Change-Id: I593896ab087e3d916b10d7d5f6b22b501060b934

Changed in neutron:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (stable/zed)

Fix proposed to branch: stable/zed
Review: https://review.opendev.org/c/openstack/neutron/+/875605

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/neutron 22.0.0.0rc1

This issue was fixed in the openstack/neutron 22.0.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (stable/zed)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/875605
Committed: https://opendev.org/openstack/neutron/commit/ec8e43f824c6fc123fd449a9404564efb43a540c
Submitter: "Zuul (22348)"
Branch: stable/zed

commit ec8e43f824c6fc123fd449a9404564efb43a540c
Author: Slawek Kaplonski <email address hidden>
Date: Wed Feb 1 11:25:04 2023 +0100

    [Secure RBAC] Add shared_qos_policy rule

    For shared QoS policies we need to have additional rule which will allow
    to list shared policies for projects which aren't owners of the QoS
    policy.

    Closes-bug: #2004013
    Closes-bug: #2004014
    Change-Id: I593896ab087e3d916b10d7d5f6b22b501060b934
    (cherry picked from commit 221cf9497fed414b01206ece6c6d41d0ec7d4088)

tags: added: in-stable-zed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/neutron 21.1.0

This issue was fixed in the openstack/neutron 21.1.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.