The security implications of this may be N/A or minor for Cinder and Neutron. In attempting to determine the scope I looked at the calls to oslo_context.context.get_current(), which I believe is the only way to get context from the thread local.
I did not see any calls to this method in Cinder or Neutron which would lead me to believe neither project is going after the thread local context to use it and are all depending on the context passed through the call chain.
The security implications of this may be N/A or minor for Cinder and Neutron. In attempting to determine the scope I looked at the calls to oslo_context. context. get_current( ), which I believe is the only way to get context from the thread local.
I did not see any calls to this method in Cinder or Neutron which would lead me to believe neither project is going after the thread local context to use it and are all depending on the context passed through the call chain.