> you don't have to catch the bad ones
Yes, for this case, agreed.
I think the setting locations stuff is just so hard to pin down for every case. Eg even limiting sending the token to known hosts, is it possible to use:
https://bugs.launchpad.net/glance/+bug/1546507
to delete shared images when using multi-tenant mode? Possibly not, but I'd have to check to be sure.
I think there's a certain amount of bravery required to enable setting locations :-)
> you don't have to catch the bad ones
Yes, for this case, agreed.
I think the setting locations stuff is just so hard to pin down for every case. Eg even limiting sending the token to known hosts, is it possible to use:
https:/ /bugs.launchpad .net/glance/ +bug/1546507
to delete shared images when using multi-tenant mode? Possibly not, but I'd have to check to be sure.
I think there's a certain amount of bravery required to enable setting locations :-)