[Openstack] [glance] Question about protected properties

Michael Turek mjturek at linux.vnet.ibm.com
Thu Aug 28 14:24:21 UTC 2014


I was wondering if the following behavior that I'm seeing with protected 
properties is intended.

My setup is a ubuntu guest running devstack.

with the following protections file:

create = admin
read = admin
update = admin
delete = admin

create = test
read = test
update = test
delete = test

The following command fails to add a property:

$# glance --os-username admin image-update --property x=True 
Request returned failure status 403.
   <title>403 Forbidden</title>
   <h1>403 Forbidden</h1>
   Property 'x' is protected<br /><br />

</html> (HTTP 403)

If the property is unspecified in the protections file, shouldn't there 
be no restrictions on it? Any insight is appreciated, thanks!


More information about the Openstack mailing list