manila/releasenotes/notes/remove-host-field-from-shares-and-replicas-a087f85bc4a4ba45.yaml
Ben Swartzlander 15b27e8fbe Only return share host for admins using shares API
Also, allow filtering by host based on policy 'list_by_host' that
defaults to 'admin only'.

Do not bump API, because it is not considered as expected behavior,
hence should not be kept for old microversions.

Co-Authored-By: Valeriy Ponomaryov <vponomaryov@mirantis.com>
APIImpact
Change-Id: I799bb7378927b6c3ee0f9fe88fd9876a03dd85b5
Closes bug: 1664370
2017-02-16 18:13:31 +00:00

11 lines
585 B
YAML

---
critical:
- The "host" field is no longer returned in the JSON response of the /shares
and /share-replicas APIs when these APIs are invoked with non-admin
privileges. Applications that depend on this field must be updated as
necessary. The value of this field is privileged information and the
request context must specify administrator privileges when using these
APIs for the "host" field to be present. The use of "host" as a filter
key in the GET /shares API is controlled with the policy "list_by_host".
This policy defaults to "rule:admin_api".