manila/manila/api/v1
Tom Barron 11971a94d3 Enforce policy checks getting share-type by name
Policy checks are skipped when looking up a share-type
by name.  This causes share creation attempts that specify
a valid share-type to pass the early API check on share type
even if the share type named is private and not shared with
the user's project.  The share creation fails later, but after
the database record for the share is created.  Although the
operation fails with an ERROR, the share is stuck in CREATING
state.

Fix this issue by checking the user's project in the database
API just as we do for share type lookups by uuid.

Closes-bug: #1885956
Change-Id: If5fe32c155fe0861b3ed86b862335e062796056b
(cherry picked from commit f877deed51)
(cherry picked from commit e02cc6d6bc)
(cherry picked from commit 2f2ed258f7)
(cherry picked from commit 644cdf4e4f)
2020-07-21 11:18:59 +00:00
..
__init__.py Renamed cinder to manila. 2013-09-02 09:59:07 +03:00
limits.py Add possibility to run 'manila-api' with wsgi web servers 2017-04-10 12:49:20 +03:00
router.py [Trivialfix] Remove the useless parameter 'ext_mgr' 2018-06-09 22:39:24 +00:00
scheduler_stats.py Add share_type filter support to pool_list 2016-12-09 09:59:34 +08:00
security_service.py move securiy service error explanation from comment 2018-04-11 20:11:40 +02:00
share_manage.py Use class name in invocation of super 2018-06-06 17:47:18 -07:00
share_metadata.py Support metadata for access rule resource 2018-07-20 23:31:48 +08:00
share_servers.py use http code constant instead of int 2018-03-20 09:26:59 +00:00
share_snapshots.py use http code constant instead of int 2018-03-20 09:26:59 +00:00
share_types_extra_specs.py use http code constant instead of int 2018-03-20 09:26:59 +00:00
share_unmanage.py Use class name in invocation of super 2018-06-06 17:47:18 -07:00
shares.py Enforce policy checks getting share-type by name 2020-07-21 11:18:59 +00:00