DescriptionLuiz Gustavo Chiaretto
2016-03-04 00:23:03 UTC
Description of problem:
User with the same project name and ‘_member_’ role can create containers on Swift Object Storage. For example, if i have a project named ‘chiaretto’ and a user also named ‘chiaretto’ the user ‘chiaretto’ can access ‘Object Storage -> Containers’ on Horizon and create containers. If i change the project’s name to ‘chiaretto1’ the user chiaretto loses the create permission and the message ‘Error: Unable to create container.’ is shown on Horizon dashboard.
Version-Release number of selected component (if applicable):
Red Hat Enterprise Linux Server release 7.2 (Maipo)
Openstack version 2015.1.2
Repo rhel-7-server-openstack-7.0-rpms/7Server/x86_64
How reproducible/Steps to Reproduce:
1. Install Openstack and enable modules below:
== Nova ==
== Glance ==
== Keystone ==
== Horizon ==
== Neutron ==
== Swift ==
== Cinder ==
== Ceilometer ==
== Heat ==
2. As 'admin' user create a project named 'chiaretto'
3. As 'admin' user create a user named 'chiaretto', project default 'chiaretto' and role '_member_'
4. Go to ‘Object Storage -> Containers’ and the button ‘Create Container’ is enabled and the user can create containers.
Actual results:
User with same name as it’s projects and ‘_member_’ role can create containers
Expected results:
Users with roles ‘_member_’ cannot create containers.
Does the user ‘chiaretto’ with role ‘_member_’ can create containers on ‘chiaretto’ project?
Comment 2Christian Schwede (cschwede)
2016-07-21 09:10:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHEA-2016-2948.html