Create temp_url for LPs uploaded to swift

Bug #1426577 reported by Murali Allada
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Solum
Fix Released
Undecided
Murali Allada

Bug Description

Languagepacks created today and stored in swift for one tenant are not accessible by another tenant. This blocks the usecase where a developer wants to use an operator created languagepack.

We need to change the way we store a reference to the build languagepack. If we create temp_urls for the LP in swift, it can be downloaded by anyone who has access to the LP id.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to solum (master)

Fix proposed to branch: master
Review: https://review.openstack.org/160038

Changed in solum:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to solum (master)

Reviewed: https://review.openstack.org/160038
Committed: https://git.openstack.org/cgit/stackforge/solum/commit/?id=b80a50f7b65b96a9bb7526bdc6f74b37e348a9fd
Submitter: Jenkins
Branch: master

commit b80a50f7b65b96a9bb7526bdc6f74b37e348a9fd
Author: Murali Allada <email address hidden>
Date: Fri Feb 27 16:54:55 2015 -0600

    Create temp_url for LPs uploaded to swift

    Languagepacks created today and stored in swift for one tenant are not
    accessible by another tenant. This blocks the usecase where a developer
    wants to use an operator created languagepack.

    We need to change the way we store the reference to a
    languagepack in the DB. If we create temp_urls for the LP in swift, it
    can be downloaded by anyone who has access to the LP id.

    Closes-bug: 1426577

    Change-Id: I2ed1a3a5825df6530dc89ae0a35abc3e3b20c377

Changed in solum:
status: In Progress → Fix Committed
Adrian Otto (aotto)
Changed in solum:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.