6179e1e988
If the last location of the image is removed, image transitions back to queued. This allows user to upload new data into the existing image record. By preventing removal of the last location we prevent the image transition back to queued. This change also prevents doing the same operation via replacing the locations with empty list. SecurityImpact DocImpact APIImpact Change-Id: Ieb03aaba887492819f9c58aa67f7acfcea81720e Closes-Bug: #1525915
11 lines
407 B
YAML
11 lines
407 B
YAML
---
|
|
security:
|
|
- Fixing bug 1525915; image might be transitioning
|
|
from active to queued by regular user by removing
|
|
last location of image (or replacing locations
|
|
with empty list). This allows user to re-upload
|
|
data to the image breaking Glance's promise of
|
|
image data immutability. From now on, last
|
|
location cannot be removed and locations cannot
|
|
be replaced with empty list.
|