Bug 1041745 - [RFE][glance]: Authorization checks should not be in the database layer
Summary: [RFE][glance]: Authorization checks should not be in the database layer
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: RFEs
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
: ---
Assignee: RHOS Maint
QA Contact:
URL: https://blueprints.launchpad.net/glan...
Whiteboard: upstream_milestone_none upstream_stat...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-12 19:08 UTC by RHOS Integration
Modified: 2015-03-19 16:57 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-03-19 16:57:09 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description RHOS Integration 2013-12-12 19:08:44 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/glance/+spec/refactoring-remove-authz-from-db.

Description:

Glance currently performs authorization checks in the database layer drivers. This approach has caused bugs in the past, increases the complexity of implementing drivers, and makes understanding the code more difficult. By adopting a query interface that supports Specification pattern arguments, we can make fairly simple db drivers and move all authorization constraints into a layer in the domain.

Specification URL (additional information):

None
Note You need to log in before you can comment on or make changes to this bug.