Add allowed address pair button is only visible to admin
Bug #1794421 reported by
Lars Erik Pedersen
This bug affects 3 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Dashboard (Horizon) |
Fix Released
|
Medium
|
Shilpa Devharakar |
Bug Description
In Queens (openstack-
When accessing the same panel in context of a project where the user has the admin role, the "add"-button is visible and functional.
I consider this to be a horizon/dashboard bug, beacause I am able to add an allowed address pair to a port with the "neutron port-update" command in context of a non-admin user.
Changed in horizon: | |
status: | New → Confirmed |
importance: | Undecided → Medium |
tags: | added: neutron |
Changed in horizon: | |
assignee: | nobody → Shilpa Devharakar (shilpasd) |
Changed in horizon: | |
milestone: | none → train-rc1 |
To post a comment you must log in.
policy_rules for allowed_ address_ pairs is correct [1] and the corresponding policy.json from neutron is correct too [2].
The policy for allowed_ address_ pairs contains a network owner check like below. port:allowed_ address_ pairs": "rule:admin_ or_network_ owner"
"update_
I wonder the network information is not passed correctly to the policy check function.
[1] http:// git.openstack. org/cgit/ openstack/ horizon/ tree/openstack_ dashboard/ dashboards/ project/ networks/ ports/extension s/allowed_ address_ pairs/tables. py#n37 git.openstack. org/cgit/ openstack/ horizon/ tree/openstack_ dashboard/ conf/neutron_ policy. json#n96
[2] http://