OpenStack Compute (Nova)

simple_usage.show does not work for non-admin users

Reported by Anthony Young on 2012-01-25
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Low
Vish Ishaya

Bug Description

Due to new auth checks, the simple_usage extension fails to return usage info for non-admin users

Fix proposed to branch: master
Review: https://review.openstack.org/3382

Changed in nova:
assignee: nobody → Anthony Young (sleepsonthefloor)
status: New → In Progress
Brian Waldon (bcwaldon) on 2012-01-25
Changed in nova:
importance: Undecided → Low
Changed in nova:
milestone: none → essex-3
Changed in nova:
assignee: Anthony Young (sleepsonthefloor) → Vish Ishaya (vishvananda)

Reviewed: https://review.openstack.org/3382
Committed: http://github.com/openstack/nova/commit/ca22fc9d3114ebb9d8b1e07f951941ac2028a1c1
Submitter: Jenkins
Branch: master

commit ca22fc9d3114ebb9d8b1e07f951941ac2028a1c1
Author: Anthony Young <email address hidden>
Date: Tue Jan 24 17:05:20 2012 -0800

    Fix authorization checks for simple_usage.show

     * Normal users shouls be allowed to query their own usage info
     * Fixes bug 921327
     * Address bcwaldon's comment about using a default {} in authorize
     * Remove is_admin references
     * Rebase and change expected auth failure response from 401 to 403
     * Remove policy-related tests
     * Add back test_verify_show_cant_view_other_tenant, implemented with test policy

    Change-Id: Ib0ce46419b7aedad34de957bfe2e60b10c5af11c

Changed in nova:
status: In Progress → Fix Committed

Reviewed: https://review.openstack.org/3448
Committed: http://github.com/openstack/nova/commit/2e12797ef6420fa305d1ac093c77a2937a90f357
Submitter: Jenkins
Branch: milestone-proposed

commit 2e12797ef6420fa305d1ac093c77a2937a90f357
Author: Anthony Young <email address hidden>
Date: Tue Jan 24 17:05:20 2012 -0800

    Fix authorization checks for simple_usage.show

     * Normal users shouls be allowed to query their own usage info
     * Fixes bug 921327
     * Address bcwaldon's comment about using a default {} in authorize
     * Remove is_admin references
     * Remove policy-related tests
     * Add back test_verify_show_cant_view_other_tenant, implemented with test policy
     * Add vish's fixes from trunk merge

    Change-Id: Ib0ce46419b7aedad34de957bfe2e60b10c5af11c

Changed in nova:
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2012-04-05
Changed in nova:
milestone: essex-3 → 2012.1
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers