Assign floating IP to port owned by another tenant is not override-able with RBAC policy
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
New
|
Medium
|
LIU Yulong |
Bug Description
In neutron/
def _internal_
"""Retrieve internal port data for floating IP.
Retrieve information concerning the internal port where
the floating IP should be associated to.
"""
if internal_
port_id = fip['port_id']
msg = (_('Cannot process floating IP association with '
raise n_exc.BadReques
This code does not allow operators to override the ability to assign floating IPs to ports on another tenant using RBAC policy. It also does not allow members of the advsvc role to take this action.
This code should be fixed to use the standard neutron RBAC and allow the advsvc role to take this action.
Changed in neutron: | |
importance: | Undecided → Medium |
Changed in neutron: | |
assignee: | nobody → LIU Yulong (dragon889) |
Yep, sorry about that. :D