]> review.fuel-infra Code Review - openstack-build/cinder-build.git/commit
Code Review / openstack-build / cinder-build.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 3b40049) | patch
Earlier authority check for create volume API
authorAnna Sortland <annasort@us.ibm.com>
Thu, 27 Aug 2015 20:36:11 +0000 (15:36 -0500)
committerAnna Sortland <annasort@us.ibm.com>
Fri, 28 Aug 2015 17:20:15 +0000 (17:20 +0000)
commit7686777023b6703230850280be895c154ef8f07d
tree0cf964b104f4d147ece7d6e3fc26b3c0a5720166tree | snapshot
parent3b40049cc858fa40ce99f2dba25d6a25f344a8e9commit | diff
Earlier authority check for create volume API

create() API in cinder/volume/api.py does the authority check
in cinder/volume/flows/api/create_volume.py.
This creates potential for disclosing information during error checking
prior to user authorization being checked.
This fix will do authority check to create() itself, so that
it is done before proceeding with the rest of code flow.

Change-Id: I27dbdf5f3ae4e3d681cdbf77df10706721254ffc
Closes-Bug: #1472031
cinder/volume/api.py diff | blob | history