Bug 1443061

Summary: "nova volume-attach" should not allow attachment of cinder volume of other project to the instance of admin project
Product: Red Hat OpenStack Reporter: Md Nadeem <mnadeem>
Component: python-django-horizonAssignee: Radomir Dopieralski <rdopiera>
Status: CLOSED ERRATA QA Contact: Beth White <beth.white>
Severity: medium Docs Contact:
Priority: medium    
Version: 10.0 (Newton)CC: athomas, berrange, beth.white, dasmith, eglynn, jschluet, kchamart, mpryc, mrunge, sbauza, sferdjao, sgordon, srevivo, vromanso
Target Milestone: Upstream M2Keywords: Triaged
Target Release: 13.0 (Queens)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: python-django-horizon-13.0.1-0.20180302203033.96905f8.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-06-27 13:29:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Md Nadeem 2017-04-18 12:07:38 UTC
Description of problem:

The cinder volume created in other project is not visible under admin project. Similarly nova CLI should not allow to attach other project volume to the admin project instance. Horizon is not permit this kind of operation, however nova CLI allow to do so. 

Further at the other project side, the volume status shows 
"Attached to None on /dev/vdX" which is also a confusing status.

However "nova volume-attach" command 

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Create volume demo-vol1(Tenant).
2. Create VM admin-vm1(Admin).
3. Source admin credential
4. Use nova volume-attch command to attached the admin-vm1 to the demo-vol1.
5. Open horizon -> under Tenant -> volume.
See that the volume display attach to "None".
​

Actual results:


Expected results:

The Operation should not be allowed as demo-vol1 should not be visible under admin project.

Additional info:

Comment 6 Radomir Dopieralski 2017-12-19 11:34:49 UTC
The upstream bug is closed as "won't fix", in addition, the patch https://review.openstack.org/#/c/143815/4 fixes the displaying of "None" in horizon, and instead displays the server id in such a situation.

Comment 9 errata-xmlrpc 2018-06-27 13:29:27 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:2086