glance/releasenotes/notes/image-not-found-policy-override-removed-52616c483a270bcf.yaml
Dan Smith 2bfdc87a8c Stop raising 403 when image is not found
Glance has a vestigial policy override knob that allows an operator
to force a 403 response when attempting to get an image from the DB
that is not found. This runs contrary to the API documentation, and
creates a (potential) interoperability concern across clouds with
differing policies on this topic.

This removes that override and changes the test from validating this
override to validating that it can no longer happen.

APIImpact
Change-Id: Ie24e3eb2f31d10d2ab9af62a0b645e8bdd0c2ff2
Closes-Bug: #1915543
2021-02-22 17:35:50 +00:00

11 lines
469 B
YAML

---
deprecations:
- |
The policy check that we ran when an image is not found is
removed. This previously allowed an operator to override the
behavior of a 404 to be a 403, in contrast to the API
documentation and design goals of defaulting to 404 for
information-hiding reasons. This check is no longer run in the
case of a NotFound result from the database, so any policy
attempting to control that behavior will be ignored from now on.