[Bug 1422046] Re: cinder backup-list is always listing all tenants's bug for admin

Yves-Gwenael Bourhis yves-gwenael.bourhis at cloudwatt.com
Tue Oct 27 07:23:22 UTC 2015


Horizon is affected because as long as cinderclient <1.4.0, if the user
is logged in with admin permissions, the user lists all cinderbackup
resources instead of the ones of his own tenant, with the reisk of
tampering with ressources from another tenant/user.

** Also affects: horizon
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to python-cinderclient in Ubuntu.
https://bugs.launchpad.net/bugs/1422046

Title:
  cinder backup-list is always listing all tenants's bug for admin

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1422046/+subscriptions



More information about the Ubuntu-server-bugs mailing list