openstack/cinder
Code Issues Proposed changes

Set default policy for "volume:get"

Browse Source 
Currently, there is no policy check defined for "volume:get", so
everyone can get another tenant's volume detail by UUID. It's necessary
to set policy to "rule:admin_or_owner" for "volume:get" by default.

Change-Id: Iefdf7e5703a28856b20d97a885267c01bed6bbb4
Closes-bug: #1475422
This commit is contained in:
liyingjun 2015-07-17 15:48:18 +08:00
parent 34f07c635b
commit 5a4f399d6c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/cinder/policy.json
View File

@ -7,7 +7,7 @@
"volume:create": "",
"volume:delete": "",
"volume:get": "",
"volume:get": "rule:admin_or_owner",
"volume:get_all": "",
"volume:get_volume_metadata": "",
"volume:get_volume_admin_metadata": "rule:admin_api",