non-admin unable to see Instance page

Bug #1942284 reported by Tóng Shèng
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
skyline apiserver
Expired
Undecided
Unassigned

Bug Description

Description
===========
User A and B have same project XYZ, User A is a project admin, user B is a project member.
User A created an instance. But user B can not see this instance.

Expected result
===============
All user have same project be able to see each of their instances.

Logs & Configs
==============
Unable to get instances.
{
  "message": "You don't have access to get instances."
}

Changed in skyline-apiserver:
status: New → Incomplete
Revision history for this message
Tóng Shèng (thangdvviettelidc) wrote :

Dear, the issue due to user non-admin (member of project) can not get detail value when get instance of them

Revision history for this message
Tóng Shèng (thangdvviettelidc) wrote :

detail: "Invalid filters id are found in query options. (HTTP 400) (Request-ID: req-zzzzzzzzzzzzzzzzzz)"
It's return from line 225 skyline-apiserver/libs/skyline-apiserver/skyline_apiserver/api/v1/extension.py

Revision history for this message
Tóng Shèng (thangdvviettelidc) wrote :

{rule: "volume_extension:types_manage", allowed: false}

{rule: "volume_extension:default_get", allowed: false}

{rule: "volume_extension:default_get_all", allowed: false}

my some RULEs set above.

Revision history for this message
Tóng Shèng (thangdvviettelidc) wrote :

we can not get instance page and some detail of valumes page.

Revision history for this message
Tóng Shèng (thangdvviettelidc) wrote :

non-user can not access volumes/detail?{id,id,id,..}. Currently, Horizone use snapshots/detail?volume_id={id} instead of volumes/detail?
So, Horizon shows list instance well as my site, Skyline is not working.
How can I change policy for this case?

Revision history for this message
Tóng Shèng (thangdvviettelidc) wrote :

sorry for my typing, non-admin (not non-user)

summary: - users join a same project but be unable to see each of their instances
+ non-admin unable to see Instance page
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for Skyline (skyline apiserver) because there has been no activity for 60 days.]

Changed in skyline-apiserver:
status: Incomplete → Expired
Revision history for this message
Satish Patel (satish-txt) wrote :

I am getting same error. non-admin can't access anything getting error pop up

{
  "message": "You don't have access to get instances.",
  "status": 401
}

Find attach screen shot

Revision history for this message
Satish Patel (satish-txt) wrote :
Revision history for this message
Shuai Qian (iauhsnaiq) wrote :

@satish Thanks for your debugging.

The issue is closed for the bug has been fixed.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.