Can any user use the command Glance member-list ?
If we want to see a list of images which are shared with a given tenant in glance , we use glance member-list command.
As this command access the details related to another tenant, Should the command be made accesible by only admin ?
Should the glance validate the inputs like tenant id given in the command ?
Question information
- Language:
- English Edit question
- Status:
- Answered
- For:
- Glance Edit question
- Assignee:
- No assignee Edit question
- Last query:
- 2015-01-09
- Last reply:
- 2015-01-14
Hi,
I'm not sure what details would you like to hide. The Image sharing feature that Glance supports uses the tenant ID as a base for sharing the Images with. Is there something else in specific that you are worried about?
I would recommend filing a bug and post the specifics there. If you find it to be a security/privacy issue, a private bug would be appreciated.
Thanks!
Can you help with this problem?
Provide an answer of your own, or ask b.sudhakoushik for more information if necessary.