[Bug 1872671] Re: [Focal] Policy files are missing

[Albert Damen]

I created a new horizon host on bionic with bionic/ussuri and installed
openstack-dashboard.

openstack-dashboard:
  Installed: 3:18.3.2-0ubuntu0.20.04.1~cloud0

apache error log showed many errors about missing policy files
admin panel was visible while logged in as non-admin user

I enabled bionic/ussuri-proposed and upgraded openstack-dashboard

openstack-dashboard:
  Installed: 3:18.3.2-0ubuntu0.20.04.2~cloud0

no error messages about missing policy files
admin panel was not visible for non-admin user
started and deleted new instance as non-admin user
switched to admin user and verified admin operations still worked


** Tags removed: verification-ussuri-needed
** Tags added: verification-ussuri-done

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to horizon in Ubuntu.
https://bugs.launchpad.net/bugs/1872671

Title:
  [Focal] Policy files are missing

Status in Ubuntu Cloud Archive:
  Fix Released
Status in Ubuntu Cloud Archive ussuri series:
  Fix Committed
Status in OpenStack Dashboard (Horizon):
  Fix Released
Status in horizon package in Ubuntu:
  Fix Released
Status in horizon source package in Focal:
  Fix Released

Bug description:
  [Impact]
  [Test Case]
  python3-django-horizon:
    Installed: 3:18.2.1~git2020032709.2c4470272-0ubuntu1

  After a fresh install of openstack dashboard on focal, apache2
  error.log contains hundreds of error message about missing policy
  files:

  [Tue Apr 14 09:12:34.558183 2020] [wsgi:error] [pid 3062:tid 140253993006848] [remote 10.64.255.1:50364] WARNING openstack_auth.policy No policy rules for service 'identity' in /usr/lib/python3/dist-packages/openstack_dashboard/conf/keystone_policy.json
  [Tue Apr 14 09:12:34.559486 2020] [wsgi:error] [pid 3062:tid 140253993006848] [remote 10.64.255.1:50364] WARNING openstack_auth.policy No policy rules for service 'compute' in /usr/lib/python3/dist-packages/openstack_dashboard/conf/nova_policy.json and files under ['/usr/lib/python3/dist-packages/openstack_dashboard/conf/nova_policy.d']
  [Tue Apr 14 09:12:34.560622 2020] [wsgi:error] [pid 3062:tid 140253993006848] [remote 10.64.255.1:50364] WARNING openstack_auth.policy No policy rules for service 'volume' in /usr/lib/python3/dist-packages/openstack_dashboard/conf/cinder_policy.json and files under ['/usr/lib/python3/dist-packages/openstack_dashboard/conf/cinder_policy.d']
  [Tue Apr 14 09:12:34.561703 2020] [wsgi:error] [pid 3062:tid 140253993006848] [remote 10.64.255.1:50364] WARNING openstack_auth.policy No policy rules for service 'image' in /usr/lib/python3/dist-packages/openstack_dashboard/conf/glance_policy.json
  [Tue Apr 14 09:12:34.562703 2020] [wsgi:error] [pid 3062:tid 140253993006848] [remote 10.64.255.1:50364] WARNING openstack_auth.policy No policy rules for service 'network' in /usr/lib/python3/dist-packages/openstack_dashboard/conf/neutron_policy.json

  The policy files are indeed missing from the package:

  dpkg -L python3-django-horizon | grep json$
  /usr/lib/python3/dist-packages/horizon/xstatic/pkg/angular/data/errors.json
  /usr/lib/python3/dist-packages/horizon/xstatic/pkg/angular/data/version.json
  /usr/lib/python3/dist-packages/horizon-18.2.1.dev1.egg-info/pbr.json

  Logging in with a normal user account (without admin role) still shows
  the admin panel and buttons a normal user cannot use, like
  identity/users "create user". Trying to use these either doesn't work
  or throws errors like "Unable to retrieve xxx".

  Copying the policy files from the source package solves the problem.

  [Regression Potential]
  Very low, this patch is just adding necessary policy files back into the package that have already existed in prior releases.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1872671/+subscriptions