Reviewed: https://review.openstack.org/110476 Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=1b69111f07de241b2cf80ea37e6fa09fcb959655 Submitter: Jenkins Branch: stable/havana
commit 1b69111f07de241b2cf80ea37e6fa09fcb959655 Author: Salvatore Orlando <salv.orla...@gmail.com> Date: Thu Apr 3 14:54:11 2014 -0700 Require admin context for interfaces on ext network Currently any user can attach an interface to a neutron external network, if the neutron plugin supports the port binding extension. In this case, nova will create neutron ports using the admin client, thus bypassing neutron authZ checks for creating ports on external networks. This patch adds a check in nova to verify the API request has an admin context when a request for an interface is made on a neutron external network. Conflicts: nova/exception.py Change-Id: I5fb0bdcbf19eb82746ea3b192c1f65899bfb3c0b Closes-Bug: 1284718 (cherry picked from commit 7d1b4117fda7709307a35e56625cfa7709a6b795) ** Tags added: in-stable-havana -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nova in Ubuntu. https://bugs.launchpad.net/bugs/1284718 Title: interface-attach to external network a) works and b) results in undeletable instances To manage notifications about this bug go to: https://bugs.launchpad.net/nova/+bug/1284718/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs