manila/releasenotes/notes/bug-2004230-fix-cross-project-rbac-328134c64c96c200.yaml
Goutham Pacha Ravi ad29f8a065 Fix policy check in metadata APIs
When a user doesn't have access to a non-public
resource, the appropriate response is HTTP 404,
not HTTP 403.

Change-Id: I62afec521c5cdfdd67ab83da40e69e6a2688c737
Closes-Bug: #2004230
Signed-off-by: Goutham Pacha Ravi <gouthampravi@gmail.com>
2023-10-16 18:11:46 +00:00

7 lines
181 B
YAML

---
fixes:
- |
Metadata APIs have been fixed to respond with HTTP 404 / Not Found when
the requester does not have access to a resource that the metadata
pertains to.