openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update manila from branch 'master'
  to 8ed1c72d5781cc52c1e64c21cfe1942c9404a7e1
  - Merge "[rbac] Pull up policy checks on share/snapshot APIs"
  - [rbac] Pull up policy checks on share/snapshot APIs
    
    RBAC enforcement in manila happens in stages:
    1) Does user have access to the API
    2) Does user have access to the resource
    3) Is user permitted to perform the API action on the resource
    
    If (1) fails, user gets a HTTP 403, if (2) fails,
    they get a HTTP 404; if (3) fails, they get a HTTP 403.
    
    More often than not, (2) prevents "existence" detection
    of resources that don't belong to the user; except in
    case of "public" resources (e.g.: shares can be "public").
    
    In some share API methods, policy checks for (1) are
    happening after a bunch of processing. This leads to
    some inconsistency.
    
    Fix these occurrences to ensure a consistent user
    experience.
    
    Change-Id: I5b1f1ce517efed000f17b1e0901e183a1913ba9f
    Related-Bug: #2004230
    Signed-off-by: Goutham Pacha Ravi <gouthampravi@gmail.com>
This commit is contained in:
Zuul 2023-09-25 12:06:33 +00:00 committed by Gerrit Code Review
parent 3de0748b4c
commit 30c5e16d51
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
manila

@ -1 +1 @@
Subproject commit 4440d80948407921cfd6dbc7c38480e164c54880
Subproject commit 8ed1c72d5781cc52c1e64c21cfe1942c9404a7e1