manila/manila/api
Tom Barron 2f2ed258f7 Enforce policy checks getting share-type by name
Policy checks are skipped when looking up a share-type
by name.  This causes share creation attempts that specify
a valid share-type to pass the early API check on share type
even if the share type named is private and not shared with
the user's project.  The share creation fails later, but after
the database record for the share is created.  Although the
operation fails with an ERROR, the share is stuck in CREATING
state.

Fix this issue by checking the user's project in the database
API just as we do for share type lookups by uuid.

Closes-bug: #1885956
Change-Id: If5fe32c155fe0861b3ed86b862335e062796056b
(cherry picked from commit f877deed51)
(cherry picked from commit e02cc6d6bc)
2020-07-16 15:51:06 +00:00
..
contrib Port share type extensions to core API 2015-11-12 14:58:20 +00:00
middleware Fix UnicodeDecodeError when decode API input 2018-02-07 06:37:32 +00:00
openstack Add share network with multiple subnets 2019-09-13 11:27:18 -03:00
v1 Enforce policy checks getting share-type by name 2020-07-16 15:51:06 +00:00
v2 Enforce policy checks for share export locations 2020-03-24 15:15:58 +00:00
views Merge "Fix _list_view function for count" 2019-09-20 02:24:36 +00:00
__init__.py Remove enable_v1_api and enable_v2_api config opts 2016-08-23 08:27:22 +02:00
auth.py Remove log translations in api 1/5 2017-03-29 16:55:05 +08:00
common.py Merge "Fix pagination does not speed up queries bug" 2019-09-26 16:50:53 +00:00
extensions.py If only .pyc exist, the extension API will be disabled 2020-03-27 12:11:51 +00:00
urlmap.py Trivial: Remove unused logging import 2015-12-28 21:44:26 -05:00
versions.py [pylint] Fix/ignore pylint errors in non-test modules 2019-02-25 17:23:15 +00:00