Glance

Add a policy to control setting 'location' parameter

Bug #1153613 reported by Stuart McLaren
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Glance
Fix Released
Undecided
Stuart McLaren
Glance 2013.2 "havana"

Bug Description

It might be useful to have a policy to control whether the 'location' field can be set or not, eg:

$ cat /etc/glance/policy.json
{
    "default": "",
    "manage_image_cache": "role:admin",
    "publicize_image": "role:admin",
    "set_image_location": "role:admin" <<<
}

this would allow an operator to enable/disable the x-image-meta-location functionality for regular users, and if desired, prevent 'external' image data being referenced.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to glance (master)

Fix proposed to branch: master
Review: https://review.openstack.org/24095

Changed in glance:
assignee: nobody → Stuart McLaren (stuart-mclaren)
status: New → In Progress
Brian Waldon (bcwaldon)
Changed in glance:
milestone: none → havana-1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to glance (master)

Reviewed: https://review.openstack.org/24095
Committed: http://github.com/openstack/glance/commit/f17f4837e06f90d2132bcdf651eaf37ea2dba180
Submitter: Jenkins
Branch: master

commit f17f4837e06f90d2132bcdf651eaf37ea2dba180
Author: Stuart McLaren <email address hidden>
Date: Mon Mar 11 17:59:32 2013 +0000

    Add 'set_image_location' policy option

    Gives operators the option to prevent references to 'external' image data.

    Addresses bug 1153613.

    Change-Id: I68aac9039eed0f70ed3b893f5c51838a70d290ae

Changed in glance:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in glance:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in glance:
milestone: havana-1 → 2013.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.