OpenStack Shared File Systems Service (Manila)

  1. Bug #1901210
  2. Comment #23

Comment 23 for bug 1901210

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (stable/victoria)

Reviewed: https://review.opendev.org/c/openstack/manila/+/859239
Committed: https://opendev.org/openstack/manila/commit/db7c4827410ee650524c886b85be3cd0ae7178b3
Submitter: "Zuul (22348)"
Branch: stable/victoria

commit db7c4827410ee650524c886b85be3cd0ae7178b3
Author: Goutham Pacha Ravi <email address hidden>
Date: Wed Sep 14 22:13:11 2022 -0700

    [RBAC] Return 404 if share is inaccessible

    When a user is prevented from listing a non-public
    share, the API service would return a 403 Forbidden.
    This isn't consistent with the API SIG's guidance
    on resources restricted by virtue of RBAC policy since
    users with malicious intent may use the signal to
    mean that the resource exists.

    Depends-On: I27fdd7dfffeb15965b66dbb3f6b1568c11ff9ad4
    Change-Id: I7e05dcb343c932cc7fec8d395919053d0a1801ce
    Closes-Bug: #1901210
    Signed-off-by: Goutham Pacha Ravi <email address hidden>
    (cherry picked from commit 6303741be2394de9301f03f28f7ad20216aad7f6)
    (cherry picked from commit 078bc4300a93e61c22b4958d87e034a707a700a1)
    (cherry picked from commit dfb4e7ee93d4893fab19e6bf4f989483ef3bef6f)
    (cherry picked from commit 5b8b7b19fd3cda9e2b3f573cdd9e704d1cca8cb0)
    (cherry picked from commit 2e420aa5b7523e6c37c16baac18843fee2f15b57)