openstack
/
glance_store
Code Issues Proposed changes
Glance stores library
141 Commits 9 Branches 40 Tags 13 MiB
Python 100%
Go to file
Stuart McLaren 69f801c349 Fix public image ACL in multi-tenant Swift mode 
Currently the ACL to public Swift images is '.r:*'. This means that
anonymous users who have not authenticated may be able to access the
data of a public Swift image when multi-tenant mode is enabled.

Change to use the cross-tenant '*:*' ACL which requires an authenticated
user for access.

Note: This does not address authenticated users being able to download
public image data directly from Swift (potentially bypassing Glance's
'download_image' policy).

Change-Id: I1fa3297908ca4be517419e9460f056a09aa98ef0
Addresses: OSSN 0025 (https://review.openstack.org/#/c/117928/)
Closes-bug: #1354512
 		2014-10-22 13:30:44 +00:00
doc/source Stop using intersphinx 2014-09-13 09:24:36 +02:00
glance_store Fix public image ACL in multi-tenant Swift mode 2014-10-22 13:30:44 +00:00
tests Fix public image ACL in multi-tenant Swift mode 2014-10-22 13:30:44 +00:00
tools Add a run_tests.sh 2014-09-17 16:05:17 +00:00
.gitignore Add a run_tests.sh 2014-09-17 16:05:17 +00:00
.gitreview Update .gitreview for project rename 2014-08-30 16:43:37 +00:00
.testr.conf Added testr 2014-02-10 10:55:11 +01:00
LICENSE Copying from glance 2014-01-24 18:30:46 +01:00
README.rst Copying from glance 2014-01-24 18:30:46 +01:00
babel.cfg Setup for glance.store for translation 2014-07-17 15:44:36 +00:00
openstack-common.conf Switch to using oslo.utils 2014-09-29 13:11:48 +08:00
requirements.txt Remove network_utils 2014-09-28 11:06:38 +08:00
run_tests.sh Updated run_tests.sh to run tests in debug mode 2014-10-20 23:57:02 -07:00
setup.cfg Mark glance_store as being a universal wheel 2014-09-22 11:11:20 +02:00
setup.py Copying from glance 2014-01-24 18:30:46 +01:00
test-requirements.txt Add coverage to test-requirements.txt 2014-10-01 11:46:46 +02:00
tox.ini Enable F841 check 2014-09-23 17:26:59 +03:00

README.rst

Glance Store Library

Glance's stores library