ironic/releasenotes/notes/node-owner-provision-fix-ee2348b5922f7648.yaml
Tzu-Mainn Chen f22ab44888 Restrict ability to change owner on provisioned or allocated node
Prevents a user from changing the owner of a provisioned node unless
they pass the new policy rule 'baremetal:node:update_owner_provisioned'.
In addition, always prevents a user from changing the owner of an
allocated node, if the allocation specifies an owner.

Story: 2006997
Task: 37766
Change-Id: I4e8559bd215f70fb895ed0d41b2154c648e03597
2019-12-13 21:06:13 +00:00

10 lines
388 B
YAML

---
fixes:
- |
Fixes an issue where a provisioned or allocated node could have its owner
changed. For backwards compatibility, we preserve the ability to do so
for a provisioned node through the use of the
``baremetal:node:update_owner_provisioned`` policy rule. We always prevent
the update if the node is associated with an allocation that specifies an
owner.