Goutham Pacha Ravi 8ab5ec6b4f [rbac] Pull up policy checks on share/snapshot APIs
RBAC enforcement in manila happens in stages:
1) Does user have access to the API
2) Does user have access to the resource
3) Is user permitted to perform the API action on the resource

If (1) fails, user gets a HTTP 403, if (2) fails,
they get a HTTP 404; if (3) fails, they get a HTTP 403.

More often than not, (2) prevents "existence" detection
of resources that don't belong to the user; except in
case of "public" resources (e.g.: shares can be "public").

In some share API methods, policy checks for (1) are
happening after a bunch of processing. This leads to
some inconsistency.

Fix these occurrences to ensure a consistent user
experience.

Change-Id: I5b1f1ce517efed000f17b1e0901e183a1913ba9f
Related-Bug: #2004230
Signed-off-by: Goutham Pacha Ravi <gouthampravi@gmail.com>
(cherry picked from commit 190876809f)
(cherry picked from commit 318140e250)
(cherry picked from commit 8edaa3254c)
(cherry picked from commit f878e15bca)
2024-02-05 22:05:41 -08:00
2021-08-21 08:33:47 +00:00
2020-08-11 21:00:54 +00:00
2017-03-30 15:12:22 +03:00
2017-10-25 11:57:46 -04:00
2021-09-17 16:23:15 +00:00
2019-06-24 15:03:51 -07:00
2020-10-14 14:05:30 +08:00
2013-08-08 10:34:06 -04:00
2020-03-18 18:59:27 -07:00
2020-03-27 16:55:52 +01:00
2020-12-10 19:48:15 -08:00
2023-01-13 20:18:47 +00:00

Team and repository tags

image

MANILA

You have come across an OpenStack shared file system service. It has identified itself as "Manila." It was abstracted from the Cinder project.

Getting Started

If you'd like to run from the master branch, you can clone the git repo:

git clone https://opendev.org/openstack/manila

For developer information please see HACKING.rst

You can raise bugs here https://bugs.launchpad.net/manila

Python client

https://opendev.org/openstack/python-manilaclient

  • Documentation for the project can be found at:

https://docs.openstack.org/manila/latest/

  • Release notes for the project can be found at:

https://docs.openstack.org/releasenotes/manila/

  • Source for the project:

https://opendev.org/openstack/manila

  • Bugs:

https://bugs.launchpad.net/manila

  • Blueprints:

https://blueprints.launchpad.net/manila

  • Design specifications are tracked at:

https://specs.openstack.org/openstack/manila-specs/

Description
Shared filesystem management project for OpenStack.
Readme 192 MiB
Languages
Python 99.3%
Shell 0.7%