Comment 4 for bug 1824442

Revision history for this message
Goutham Pacha Ravi (gouthamr) wrote :

Thanks for your insightful analysis and questions on this bug.

Manila is performing the neutron queries with its service credentials. Internally, it needs the information that it is incidentally exposing to end users.

Currently there is no fine-grained policy to isolate fields with the share networks API. That would be a good way to fix this bug. We could specify the default rule to match that of neutron.