deb-cinder/releasenotes/notes/validate_vol_create_uuids-4f08b4ef201385f6.yaml
dineshbhor 2d4a804876 Validate uuid parameters strictly for create volume API
Parameters like "consistencygroup_id" "source_volid" and
"source_replica" are expected to be in UUID format but if user
passes non-UUID format value like '1', create api searches for
that particular entity in database and returns 404 NotFound.
Also If user passes any non-integer value like [](empty list),
{}(empty dict), it returns 500 error. This patch proposes to
validate uuid parameters are adhering to the uuid format otherwise
it will return 400 BadRequest.

APIImpact: If user passes non-uuid values to consistencygroup_id,
source_volid and source_replica parameters in the request body of
create volume API, then it will return 400 error instead of
404/500 error.

Closes-Bug: #1680709
Change-Id: I31ea4f378be380a783d1c0249552ded8794fc52e
2017-04-07 12:28:54 +05:30

7 lines
215 B
YAML

---
fixes:
- |
The create volume api will now return 400 error instead of 404/500 if user
passes non-uuid values to consistencygroup_id, source_volid and
source_replica parameters in the request body.