Comment 7 for bug 1477910

Revision history for this message
Mike Fedosin (mfedosin) wrote :

Technically each user may execute this code:

import os
for _ in range(25):
    os.system('glance image-create --property ramdisk_id=666')

and It forbids admin to execute image-list command in v2 api. If user is able to create public images, image-list won't work for all users in the system. It's not deadly, because admin can list and delete them with v1 api, but very annoying.

I think Stuart patch does the right thing by rejecting schema validation for lists and it should be merged asap.