neutron/neutron
Matthew Edmonds 2ae14cc9ad fix overaggressive 403->404 conversion
When a user is not authorized to see a given resource, we need to
convert HTTP 403s into HTTP 404s to avoid giving away information
that the resource exists. However, the previous code was being
overaggressive and doing this conversion even in some cases where
the user is allowed to see the resource and really needs to know
that what they were trying to do is forbidden, not be told that the
resource doesn't exist. This fixes that logic to only do the 403
to 404 conversion when truly appropriate.

Change-Id: I7a5b0a9e89c8a71490dd74497794a52489f46cd2
Closes-Bug: 1682621
2017-04-14 13:14:47 -04:00
..
agent Merge "Stop direct access to CONF.debug" 2017-04-13 18:05:59 +00:00
api fix overaggressive 403->404 conversion 2017-04-14 13:14:47 -04:00
callbacks Downgrade callback abortable event log to debug 2017-03-16 13:35:39 -07:00
cmd Add sanity check for conntrack 2017-04-11 13:33:01 +00:00
common Merge "Throttle SIGHUPs to keepalived" 2017-03-28 23:28:50 +00:00
conf Merge "Bump default quotas for ports, subnets, and networks" 2017-03-23 11:19:26 +00:00
core_extensions Adopt neutron-lib plugin directory 2016-11-23 04:45:33 -07:00
db Flush objects by ourselves before processing before_commit event 2017-04-06 21:52:19 +00:00
debug use neutron_lib's portbindings api-def 2017-03-31 09:16:22 -06:00
extensions Merge "Add validation for security_groups parameter in Port" 2017-04-03 07:52:39 +00:00
hacking hacking: disable log translations check 2017-04-04 20:34:33 +03:00
ipam New enginefacade for networks, subnets. 2017-03-30 01:26:45 -07:00
locale Imported Translations from Zanata 2016-08-19 07:27:43 +00:00
notifiers Merge "Use registry.receives decorator in neutron.notifiers.nova" 2017-03-15 06:27:04 +00:00
objects Merge "Remove unnecessary overrides in Subnetpool OVO" 2017-04-05 06:58:47 +00:00
pecan_wsgi Use new enginefacade for quota and provisioning blocks 2017-03-29 14:31:03 +00:00
plugins Merge "deepcopy binding and binding levels avoid expiration" 2017-04-07 23:54:37 +00:00
privileged Do not raise an error deleting neighbour entry 2017-01-26 16:22:20 -05:00
quota Use new enginefacade for quota and provisioning blocks 2017-03-29 14:31:03 +00:00
scheduler Refactor L3 scheduler (unify code paths) 2017-01-26 23:05:06 +00:00
server Pecan: Get loaded by paste deploy 2017-02-17 14:54:27 -06:00
services Inherit segmentation details for trunk subports if requested 2017-04-03 21:22:38 -07:00
tests fix overaggressive 403->404 conversion 2017-04-14 13:14:47 -04:00
__init__.py
_i18n.py
auth.py Use oslo.context class method to construct context object 2017-03-23 09:02:46 +00:00
manager.py Use is_loaded in manager.init 2017-03-30 14:53:20 +00:00
neutron_plugin_base_v2.py Revert "Revert "Remove threading before process forking"" 2016-06-02 21:26:08 +00:00
opts.py Agent common config 2017-03-15 09:52:18 -06:00
policy.py Spin off context module 2017-03-06 16:25:29 +00:00
service.py Spin off context module 2017-03-06 16:25:29 +00:00
version.py
worker.py Move AgentStatusCheckWorker to PeriodicWorker 2016-11-17 15:31:19 -08:00
wsgi.py Fix some reST field lists in docstrings 2017-03-23 08:50:01 +08:00