[Bug 1422046] Re: cinder backup-list is always listing all tenants's bug for admin

Yves-Gwenael Bourhis yves-gwenael.bourhis at cloudwatt.com
Tue Oct 27 07:38:33 UTC 2015


This can be a security issue, because openstack admins may not be aware
that they are seeing other users' cinder backup ressources and can
delete them.


** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to python-cinderclient in Ubuntu.
https://bugs.launchpad.net/bugs/1422046

Title:
  cinder backup-list is always listing all tenants's bug for admin

Status in OpenStack Dashboard (Horizon):
  New
Status in ospurge:
  Fix Committed
Status in python-cinderclient:
  Fix Released
Status in python-cinderclient package in Ubuntu:
  Confirmed

Bug description:
  cinder backup-list doesn't support '--all-tenants' argument for admin
  wright now. This lead to admin always getting all tenants's backups.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1422046/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list