octavia/validate-access-to-vip_subnet_id-48fc92b45529cafd.yaml at c766d891e512d28ab6056126a977d467ce15e317 - octavia - OpenDev: Free Software Needs Free Tools

openstack/octavia

Gregory Thiemonge 8d86187c0a Validate user access to vip_subnet_id when creating a LB

A user was able to create a LB using a vip_subnet_id from another user
(by passing the UUID).
Now, the vip_subnet_id parameter is validated using the user context,
so an error is returned if the subnet doesn't belong to the user.

I479019a911b5a1acfc1951d1cbbc2a351089cb4d was a previous attempt to fix
that bug but vip_subnet_id check was missing.

Story: 2008586
Task: 41741

Depends-On: https://review.opendev.org/774157

Change-Id: I602418264e171a2b1a926eff0b1f9e6dc186295a

2021-03-20 20:33:48 +00:00

6 lines

156 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     Fix a bug that allowed a user to create a load balancer on a
     ``vip_subnet_id`` that belongs to another user using the subnet UUID.