[Openstack] [glance] Question about protected properties

stuart.mclaren at hp.com stuart.mclaren at hp.com
Thu Aug 28 14:47:52 UTC 2014


Hi Mike,

Does it work if you put this at the very bottom of the file?

[.*]
create = @
read = @
update = @
delete = @

-Stuart

On Thu, 28 Aug 2014, Michael Turek wrote:

> Hello,
>
> I was wondering if the following behavior that I'm seeing with protected 
> properties is intended.
>
> My setup is a ubuntu guest running devstack.
>
> with the following protections file:
>
> [admin]
> create = admin
> read = admin
> update = admin
> delete = admin
>
> [protected]
> create = test
> read = test
> update = test
> delete = test
>
> The following command fails to add a property:
>
> $# glance --os-username admin image-update --property x=True 
> <image-name-here>
> Request returned failure status 403.
> <html>
> <head>
>  <title>403 Forbidden</title>
> </head>
> <body>
>  <h1>403 Forbidden</h1>
>  Property 'x' is protected<br /><br />
>
> </body>
> </html> (HTTP 403)
>
> If the property is unspecified in the protections file, shouldn't there be no 
> restrictions on it? Any insight is appreciated, thanks!
>
> -Mike
>
>
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>




More information about the Openstack mailing list