Comment 9 for bug 2051831

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to neutron (stable/2023.1)

Reviewed: https://review.opendev.org/c/openstack/neutron/+/908257
Committed: https://opendev.org/openstack/neutron/commit/68542c04a11a5585986571dac15fd72e11fb8f73
Submitter: "Zuul (22348)"
Branch: stable/2023.1

commit 68542c04a11a5585986571dac15fd72e11fb8f73
Author: Rodolfo Alonso Hernandez <email address hidden>
Date: Mon Jan 29 23:25:44 2024 +0000

    [OVN] Use elevated context to retrieve subnet in router port configuration

    The method ``_get_nets_and_ipv6_ra_confs_for_router_port`` can be called
    from a non-admin user request, when updating or creating a local router
    port. If the router external gateway network is "external" (as it should
    be) but is not explicitly shared (a network RBAC with action
    "access_as_shared"), the user won't retrieve the corresponding subnet.

    NOTE: is is *not* needed to apply both "access_as_shared" and
    "access_as_external" RBACs to a network. Please read c#1 in the LP bug
    for more context.

    Related-Bug: #2051831
    Change-Id: I161f1a6021c0da2d0063f8cb249b3bb9d7b6d5ae
    (cherry picked from commit 70e51eb2baac3c891d735aa5ffbeb4fca425f29b)