I can no longer delete servers by name with non admin users on the rackspace cloud.
The issue appears to have been introduced here.
https://github.com/openstack/python-novaclient/commit/a0481e1c8008935d34e8f6e2cf896723b5e36f0a
The non admin user is unable to do the all_tenants lookup, and therefore fails there.
REQ: curl -g -i --insecure 'https://iad.servers.api.rackspacecloud.com/v2/<redacted>/servers?all_tenants=1&name=racktest' -X GET -H "Accept: application/json" -H "User-Agent: python-novaclient" -H "X-Auth-Token: <redacted>"
RESP: [403] {'content-length': '104', 'via': '1.1 Repose (Repose/6.2.1.2)', 'x-compute-request-id': 'req-77d8df40-8984-4f76-9826-e5190a9adaa7', 'server': 'Jetty(9.2.z-SNAPSHOT)', 'date': 'Wed, 01 Apr 2015 20:34:20 GMT, Wed, 01 Apr 2015 20:34:20 GMT', 'content-type': 'application/json; charset=UTF-8'}
RESP BODY: {"forbidden": {"message": "Policy doesn't allow compute:get_all_tenants to be performed.", "code": 403}}
Thanks.
Daniel
The all_tenants is controlled by policy, so deployments that have configured all_tenants to be admin-only are affected by this.