Skip to content

Commit a7c010e

Browse files
sorrisonpriteau
authored andcommitted
Fix v2 API dataframes get policy check
oslo.policy expects the key project_id, not tenant_id anymore. This was causing the GET /v2/dataframes policy check to fail: $ openstack --rating-api-version 2 rating dataframes get {"message": "You are not authorized to perform this action"} (HTTP 403) In the v1 API, the storage:list_data_frames operation was not affected because it uses project_id. Change-Id: Ie4aa6a21e3829223aab0f91d809e311e0f0318cb Story: 2009879 Task: 44618 (cherry picked from commit 32bf128)
1 parent 6a25347 commit a7c010e

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

cloudkitty/api/v2/dataframes/dataframes.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ def get(self,
7272
policy.authorize(
7373
flask.request.context,
7474
'dataframes:get',
75-
{'tenant_id': flask.request.context.project_id},
75+
{'project_id': flask.request.context.project_id},
7676
)
7777

7878
begin = begin or tzutils.get_month_start()
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
fixes:
3+
- |
4+
Fixes policy check when getting dataframes using the v2 API, causing the
5+
operation to fail when run by a non-admin user. See story 2009879
6+
<https://storyboard.openstack.org/#!/story/2009879>`_ for more details.

0 commit comments

Comments
 (0)