Comment 6 for bug 1618513

Revision history for this message
melanie witt (melwitt) wrote :

From what I can tell, the bug is that the used limits API is exposed to non-admin users. The policy is using RULE_ADMIN_API [1] but I think maybe it doesn't work because the path for both "limits" and "used limits" is "/limits".

But maybe this has been exposed so long that quota-sets should be changed to have parity.

[1] https://github.com/openstack/nova/blob/48268c7/nova/policies/used_limits.py#L27