Public bug reported: Steps to reproduce:
1. Create a new image with 'active' status. 2. Deactivate this image from admin. (image should have a 'deactivated' status) 3. Use this curl request: curl -X PUT http://localhost:9292/v1/images/<USER_IMAGE_ID> -H 'X-Auth-Token: <USER_TOKEN>' -H 'x-image-meta-size: 1234567' 4. Verify that created image have a '1234567' size. ** Affects: glance Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. https://bugs.launchpad.net/bugs/1517060 Title: User (without admin privileges) can change size your own image with 'deactivated' status. Status in Glance: New Bug description: Steps to reproduce: 1. Create a new image with 'active' status. 2. Deactivate this image from admin. (image should have a 'deactivated' status) 3. Use this curl request: curl -X PUT http://localhost:9292/v1/images/<USER_IMAGE_ID> -H 'X-Auth-Token: <USER_TOKEN>' -H 'x-image-meta-size: 1234567' 4. Verify that created image have a '1234567' size. To manage notifications about this bug go to: https://bugs.launchpad.net/glance/+bug/1517060/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp

