It will fail when non-admin tenants try to get share networks
and security services with option '{all_tenants: 1}'.
The reason is that the policy of 'get_all_share_networks' and
'get_all_security_services' are admin api, they do not allow
the non-admin tenants list the share networks and security
services with all_tenants=1. This patch removes the policy check
of non-admin tenants and allows non-admin tenants to request to
list with 'all_tenants=1', however 'all_tenants' in the request
is just ignored.
Change-Id: Ied021b66333f1254cd232bbc38562a4a9b762ad2
Co-Authored-By: Goutham Pacha Ravi <gouthampravi@gmail.com>
Related-Bug: #1721787
7 lines
312 B
YAML
Executable File
7 lines
312 B
YAML
Executable File
---
|
|
fixes:
|
|
- Non admin users may invoke GET /share-networks and GET /security-services
|
|
APIs with the 'all-tenants' flag in the query, however, the flag is
|
|
ignored, and only resources belonging to the project will be served. This
|
|
API change was made to fix bug 1721787 in the manila client project.
|