tacker/bug-1983575-disallow-subscription-change-of-diff-tenant-06a03559bfca3431.yaml at 46da7f8f591cc43a81f849998548922db2cce50a - tacker - OpenDev: Free Software Needs Free Tools

openstack/tacker

Manpreet Kaur d5a97c5ffb Restrict changing subscription of different tenant

In current tacker multi-tenant environment, users are able to perform
show and delete operations on subscriptions belonging to different
tenants.

This patch fixes the above problem by adding tenant_id in where clause
of the existing SQL queries used to show and delete subscriptions in
tacker.

Note: The functional test cases for the proposed changes are covered
in [1].

[1] https://review.opendev.org/c/openstack/tacker/+/846130

Closes-Bug: #1983575
Change-Id: I202bbcb2b8294993c4961afce0599e0737b0464d

2022-09-07 16:11:14 +05:30

9 lines

255 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     Fixes `bug 1983575`_. In a multi-tenant environment, tacker disallows
     deletion operation and showing of subscription details belonging to
     different tenants.
     .. _bug 1983575: https://bugs.launchpad.net/tacker/+bug/1983575