2016-03-03 2:11 GMT+08:00 Matt Riedemann <[email protected]>:
> > > On 3/2/2016 3:02 AM, Zhenyu Zheng wrote: > >> Hi, Nova, >> >> While I'm working on add "changes-since" parameter support for >> python-novaclient "list" CLI. >> >> I realized that non-admin can list all deleted instances using >> "changes-since" parameter. This is reasonable in some level, as delete >> is an update to instances. But as we have a limitation that when list >> instances, deleted parameter is only allowed for admin users. >> >> This will lead to inconsistent to the rule of show deleted instances, as >> we limit the list of deleted instances to admin only, but non-admin can >> get the information using changes-since. >> >> Should we fix this? >> >> https://bugs.launchpad.net/nova/+bug/1552071 >> >> Thanks, >> >> Kevin Zheng >> >> >> __________________________________________________________________________ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> [email protected]?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > Unless I'm missing some use case, I think that listing instances for > non-admins should be restricted to the instances they own, regardless of > whether or not they are deleted, period. > agree with this. I didn't see a problem showing the deleted instance for non-admins. > > As for listing deleting instances as an admin, that was broken with the > 2.16 microversion and there is a fix here: > > https://review.openstack.org/#/c/283820/ > > -- > > Thanks, > > Matt Riedemann > > > __________________________________________________________________________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: [email protected]?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: [email protected]?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
