Reviewed: https://review.opendev.org/c/openstack/horizon/+/945527
Committed:
https://opendev.org/openstack/horizon/commit/f0ed422eb3c7b39530ec7b97c9dff1dd54089342
Submitter: "Zuul (22348)"
Branch: master
commit f0ed422eb3c7b39530ec7b97c9dff1dd54089342
Author: Andrew Bogott <abog...@wikimedia.org>
Date: Tue Mar 25 16:19:26 2025 -0500
network_topology: check policy for UI elements
Previously this UI would enable buttons to delete instances or
networks when those actions are not permitted and would fail.
Bug: 2104173
Change-Id: I60c2c1c87605fd4796439e60f3a623722bd4b09f
** Changed in: horizon
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/2104173
Title:
network topology UI too enthusiastic about deletions
Status in OpenStack Dashboard (Horizon):
Fix Released
Bug description:
The attached screenshots are from the 'network topology' horizon
panel. I'm running as a user with restricted read-only rights, and yet
the UI suggests that I delete VMs (which I am not allowed to delete)
and networks (which I am not allowed to delete.)
This isn't a security issue since the neutron and nova APIs won't
actually allow the deletion. Still, the UI is wrong and alarming.
We need policy checks around these buttons.
To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/2104173/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
