Reviewed: https://review.openstack.org/319558 Committed: https://git.openstack.org/cgit/openstack/neutron-dynamic-routing/commit/?id=62cb5c418442adc71469d74106839ad041b940ff Submitter: Jenkins Branch: master
commit 62cb5c418442adc71469d74106839ad041b940ff Author: Na <[email protected]> Date: Sat May 21 05:49:50 2016 -0700 Fix the policy check for BGP APIs Only admin can configure BGP, this patch add policy check for BGP APIs. Change-Id: I5ce602202c52542792cc5b22e58e0ed074e09d7d Closes-Bug: #1583958 ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1583958 Title: non-admin can create and list bgpspeakers but can not show or update speaker Status in neutron: Fix Released Bug description: Here is the configuration: [root@SG-dev-flynn-3-fwaas devstack]# source openrc demo demo WARNING: setting legacy OS_TENANT_NAME to support cli tools. [root@SG-dev-flynn-3-fwaas devstack]# nova list +----+------+--------+------------+-------------+----------+ | ID | Name | Status | Task State | Power State | Networks | +----+------+--------+------------+-------------+----------+ +----+------+--------+------------+-------------+----------+ [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-create --ip-version 4 --local-as 777 106 Created a new bgp_speaker: +-----------------------------------+--------------------------------------+ | Field | Value | +-----------------------------------+--------------------------------------+ | advertise_floating_ip_host_routes | True | | advertise_tenant_networks | True | | id | ee03ac3c-81c8-46ce-abad-e3fac4877e87 | | ip_version | 4 | | local_as | 777 | | name | 106 | | networks | | | peers | | | tenant_id | 01c10991df8749d8a79694dad6dfb836 | +-----------------------------------+--------------------------------------+ [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-create --ip-version 4 --local-as 7788 101 Created a new bgp_speaker: +-----------------------------------+--------------------------------------+ | Field | Value | +-----------------------------------+--------------------------------------+ | advertise_floating_ip_host_routes | True | | advertise_tenant_networks | True | | id | cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 | | ip_version | 4 | | local_as | 7788 | | name | 101 | | networks | | | peers | | | tenant_id | 01c10991df8749d8a79694dad6dfb836 | +-----------------------------------+--------------------------------------+ [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-list +--------------------------------------+------+----------+------------+ | id | name | local_as | ip_version | +--------------------------------------+------+----------+------------+ | cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 | 101 | 7788 | 4 | | ee03ac3c-81c8-46ce-abad-e3fac4877e87 | 106 | 777 | 4 | +--------------------------------------+------+----------+------------+ [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show cb0a27e5-42a6-44c1-914b-9bce85a4d1e1 Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found. Neutron server returns request_ids: ['req-bff87635-2767-4bfd-b6e0-cc1399136d88'] [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show 101 Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found. Neutron server returns request_ids: ['req-fd336b49-70e3-4a20-ba2d-9ca9889ea05c'] [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-show 106 Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found. Neutron server returns request_ids: ['req-70354c3c-d59a-4f69-ba3a-54edbce12e44'] [root@SG-dev-flynn-3-fwaas devstack]# neutron bgp-speaker-update --advertise-floating-ip-host-routes=False 106 Failed to check policy tenant_id:%(tenant_id)s because Unable to verify match:%(tenant_id)s as the parent resource: tenant was not found. Neutron server returns request_ids: ['req-a13edca8-7d55-4568-a94f-a6bd228923fc'] To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1583958/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
