Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-03 Thread Kuvaja, Erno
-Original Message- From: Sean Dague [mailto:s...@dague.net] Sent: 02 February 2015 16:19 To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes On 02/01/2015 06:20 PM, Morgan Fainberg wrote: Putting on my sorry

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-03 Thread Kuvaja, Erno
this discussion, here) -Original Message- From: Sean Dague [mailto:s...@dague.net] Sent: Monday, February 02, 2015 8:19 AM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes On 02/01/2015 06:20 PM, Morgan Fainberg wrote: Putting

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-02 Thread Rochelle Grober
, 2015 8:19 AM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes On 02/01/2015 06:20 PM, Morgan Fainberg wrote: Putting on my sorry-but-it-is-my-job-to-get-in-your-way hat (aka security), let's be careful how generous we

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-02 Thread Sean Dague
On 02/02/2015 12:54 AM, Christopher Yeoh wrote: On Sun, Feb 1, 2015 at 2:57 AM, Sean Dague s...@dague.net mailto:s...@dague.net wrote: On 01/31/2015 05:24 AM, Duncan Thomas wrote: Hi This discussion came up at the cinder mid-cycle last week too, specifically in

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-02 Thread Sean Dague
On 02/01/2015 06:20 PM, Morgan Fainberg wrote: Putting on my sorry-but-it-is-my-job-to-get-in-your-way hat (aka security), let's be careful how generous we are with the user and data we hand back. It should give enough information to be useful but no more. I don't want to see us opened to

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-01 Thread Morgan Fainberg
Putting on my sorry-but-it-is-my-job-to-get-in-your-way hat (aka security), let's be careful how generous we are with the user and data we hand back. It should give enough information to be useful but no more. I don't want to see us opened to weird attack vectors because we're exposing internal

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-02-01 Thread Christopher Yeoh
On Sun, Feb 1, 2015 at 2:57 AM, Sean Dague s...@dague.net wrote: On 01/31/2015 05:24 AM, Duncan Thomas wrote: Hi This discussion came up at the cinder mid-cycle last week too, specifically in the context of 'Can we change the details text in an existing error, or is that an

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-01-31 Thread Sean Dague
On 01/31/2015 05:24 AM, Duncan Thomas wrote: Hi This discussion came up at the cinder mid-cycle last week too, specifically in the context of 'Can we change the details text in an existing error, or is that an unacceptable API change'. I have to second security / operational concerns

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-01-31 Thread James E. Blair
Sean Dague s...@dague.net writes: On 01/31/2015 05:24 AM, Duncan Thomas wrote: What I would rather not see is leakage of information when something internal to the cloud goes wrong, that the tenant can do nothing against. We certainly shouldn't be leaking internal implementation details like

Re: [openstack-dev] [Product] [all][log] Openstack HTTP error codes

2015-01-31 Thread Duncan Thomas
Hi This discussion came up at the cinder mid-cycle last week too, specifically in the context of 'Can we change the details text in an existing error, or is that an unacceptable API change'. I have to second security / operational concerns about exposing too much granularity of failure in these