Horizon is affected because as long as cinderclient <1.4.0, if the user
is logged in with admin permissions, the user lists all cinderbackup
resources instead of the ones of his own tenant, with the reisk of
tampering with ressources from another tenant/user.
** Also affects: horizon
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1422046
Title:
cinder backup-list is always listing all tenants's bug for admin
To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1422046/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs