octavia/octavia/api
Gregory Thiemonge 7d1b81d78f Validate user access to vip_subnet_id when creating a LB
A user was able to create a LB using a vip_subnet_id from another user
(by passing the UUID).
Now, the vip_subnet_id parameter is validated using the user context,
so an error is returned if the subnet doesn't belong to the user.

I479019a911b5a1acfc1951d1cbbc2a351089cb4d was a previous attempt to fix
that bug but vip_subnet_id check was missing.

Story: 2008586
Task: 41741

Depends-On: https://review.opendev.org/774157

Change-Id: I602418264e171a2b1a926eff0b1f9e6dc186295a
(cherry picked from commit 8d86187c0a)
2021-03-29 01:08:45 +00:00
..
common Correct spell error 2020-12-25 14:29:18 +08:00
drivers Fix empty Batch Member Update to unlock objects 2021-03-24 00:59:18 +00:00
healthcheck Make /healthcheck cache results 2021-03-15 21:43:43 +00:00
v2 Validate user access to vip_subnet_id when creating a LB 2021-03-29 01:08:45 +00:00
__init__.py Add license for empty __init__.py 2018-03-14 07:02:56 +09:00
app.py Add oslo middleware healthcheck to Octavia API 2020-03-19 11:24:16 -07:00
config.py Implement provider drivers - Load Balancer 2018-05-22 17:26:08 -07:00
root_controller.py Add ALPN support for TLS-enabled pools 2021-01-28 14:42:48 +01:00