openstack
/
nova
Code Issues Proposed changes
nova/nova
History
Ghanshyam Mann 58701be615 Fix os-ips policy to be admin_or_owner 
os-ips API policy is default to admin_or_owner[1] but API
is allowed for everyone.

We can see the test trying with other project context can access the API
- https://review.opendev.org/#/c/715477

This is because API does not pass the server project_id in policy target[2]
and if no target is passed then, policy.py add the default targets which is
nothing but context.project_id (allow for everyone who try to access)[3]

This commit fix this policy by passing the server's project_id in policy
target.

Closes-bug: #1869396
[1] eaf08c0b7b/nova/policies/ips.py (L27)

Change-Id: Ie7bcb6537f90813cc5b23d69c886037d25b15a42
 		2020-03-28 20:56:46 -05:00
..
accelerator Create and bind Cyborg ARQs. 2020-03-21 12:03:38 -07:00
api Fix os-ips policy to be admin_or_owner 2020-03-28 20:56:46 -05:00
cmd Merge "Allow TLS ciphers/protocols to be configurable for console proxies" 2020-02-24 17:27:02 +00:00
compute Merge "Pass accelerator requests to each virt driver from compute manager." 2020-03-27 02:07:24 +00:00
conductor Create and bind Cyborg ARQs. 2020-03-21 12:03:38 -07:00
conf Merge "Create and bind Cyborg ARQs." 2020-03-27 00:53:12 +00:00
console Merge "Allow TLS ciphers/protocols to be configurable for console proxies" 2020-02-24 17:27:02 +00:00
db Merge "remove DISTINCT ON SQL instruction that does nothing on MySQL" 2020-03-25 23:18:58 +00:00
hacking Switch to hacking 2.x 2020-01-17 11:30:40 +00:00
image Remove 'nova.image.api' module 2020-02-18 11:45:39 +00:00
keymgr
…
locale Imported Translations from Zanata 2019-12-09 06:44:38 +00:00
network Merge "nova-net: Remove unused parameters" 2020-03-26 21:46:16 +00:00
notifications Remove 'nova.image.api' module 2020-02-18 11:45:39 +00:00
objects Store instance action event exc_val fault details 2020-03-21 06:08:34 +00:00
pci support pci numa affinity policies in flavor and image 2019-12-11 14:39:12 +00:00
policies Merge "Add new default roles in os-instance-actions policies" 2020-03-21 04:58:26 +00:00
privsep images: Allow the output format of qemu-img info to be controlled 2020-03-16 09:45:31 +00:00
scheduler Add transform_image_metadata request filter 2020-03-24 17:28:50 +00:00
servicegroup Handle ServiceNotFound in DbDriver._report_state 2019-12-04 09:50:17 -05:00
tests Fix os-ips policy to be admin_or_owner 2020-03-28 20:56:46 -05:00
virt Merge "Pass accelerator requests to each virt driver from compute manager." 2020-03-27 02:07:24 +00:00
volume Fix exception translation when creating volume 2019-10-10 02:38:33 +00:00
__init__.py Eventlet monkey patching should be as early as possible 2019-03-22 09:27:16 +00:00
availability_zones.py trivial: Fetch 'Service' objects once when building AZs 2020-02-05 21:26:23 +00:00
baserpc.py
…
block_device.py hacking: Resolve W605 (invalid escape sequence) 2019-06-24 14:24:06 -05:00
cache_utils.py trivial: Remove unused 'cache_utils' APIs 2020-02-05 17:20:28 +00:00
config.py Rename 'nova.common.config' module to 'nova.middleware' 2019-08-16 00:53:03 +01:00
context.py ksa auth conf and client for Cyborg access 2020-03-21 12:03:37 -07:00
crypto.py
…
debugger.py
…
exception.py Create and bind Cyborg ARQs. 2020-03-21 12:03:38 -07:00
exception_wrapper.py
…
filters.py filters: Stop handling cells v1 2019-06-12 16:09:46 +01:00
hooks.py
…
i18n.py
…
loadables.py trivial: Remove dead code 2019-12-12 10:55:02 +00:00
manager.py
…
middleware.py Rename 'nova.common.config' module to 'nova.middleware' 2019-08-16 00:53:03 +01:00
monkey_patch.py Monkey patch original current_thread _active 2020-02-12 16:34:56 -05:00
policy.py Fix the suppress of policy deprecation warnings 2020-01-07 17:58:09 +00:00
profiler.py
…
quota.py nova-net: Remove remaining nova-network quotas 2019-12-02 17:39:23 +00:00
rpc.py Remove unnecessary wrapper 2019-05-29 17:14:13 +01:00
safe_utils.py
…
service.py nova-net: Remove 'MetadataManager' 2020-01-08 13:54:12 +00:00
service_auth.py
…
test.py Ensures that COMPUTE_RESOURCE_SEMAPHORE usage is fair 2020-03-16 20:10:17 +01:00
utils.py trivial: Remove 'run_once' helper 2020-02-06 15:49:07 +00:00
version.py
…
weights.py
…
wsgi.py
…