As far as I've tested, even if location (x-image-meta-location) is specified in the POST v1/images API, and even if the cinder is not the default store, the location is passed to the cinder store driver and the owner is checked with my patch.
Just in the case, I have added the owner check to delete() and get() too.
Unit tests are also added in the patch v3.
Brian,
As far as I've tested, even if location (x-image- meta-location) is specified in the POST v1/images API, and even if the cinder is not the default store, the location is passed to the cinder store driver and the owner is checked with my patch.
Just in the case, I have added the owner check to delete() and get() too.
Unit tests are also added in the patch v3.