commit b1d7df2c17dd656fdb07c415a53da78a81d22c0f
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Mon Jan 29 23:25:44 2024 +0000
[OVN] Use elevated context to retrieve subnet in router port configuration
The method ``_get_nets_and_ipv6_ra_confs_for_router_port`` can be called
from a non-admin user request, when updating or creating a local router
port. If the router external gateway network is "external" (as it should
be) but is not explicitly shared (a network RBAC with action
"access_as_shared"), the user won't retrieve the corresponding subnet.
NOTE: is is *not* needed to apply both "access_as_shared" and
"access_as_external" RBACs to a network. Please read c#1 in the LP bug
for more context.
Related-Bug: #2051831
Change-Id: I161f1a6021c0da2d0063f8cb249b3bb9d7b6d5ae
(cherry picked from commit 70e51eb2baac3c891d735aa5ffbeb4fca425f29b)
Reviewed: https:/ /review. opendev. org/c/openstack /neutron/ +/908256 /opendev. org/openstack/ neutron/ commit/ b1d7df2c17dd656 fdb07c415a53da7 8a81d22c0f
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/2023.2
commit b1d7df2c17dd656 fdb07c415a53da7 8a81d22c0f
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Mon Jan 29 23:25:44 2024 +0000
[OVN] Use elevated context to retrieve subnet in router port configuration
The method ``_get_ nets_and_ ipv6_ra_ confs_for_ router_ port`` can be called as_shared" ), the user won't retrieve the corresponding subnet.
from a non-admin user request, when updating or creating a local router
port. If the router external gateway network is "external" (as it should
be) but is not explicitly shared (a network RBAC with action
"access_
NOTE: is is *not* needed to apply both "access_as_shared" and as_external" RBACs to a network. Please read c#1 in the LP bug
"access_
for more context.
Related-Bug: #2051831 2d0063f8cb249b3 bb9d7b6d5ae 91d735aa5ffbeb4 fca425f29b)
Change-Id: I161f1a6021c0da
(cherry picked from commit 70e51eb2baac3c8