Glance

Can any user use the command Glance member-list ?

Asked by b.sudhakoushik on 2015-01-09

If we want to see a list of images which are shared with a given tenant in glance , we use glance member-list command.
As this command access the details related to another tenant, Should the command be made accesible by only admin ?

Should the glance validate the inputs like tenant id given in the command ?

Question information

Language:
English Edit question
Status:
Answered
For:
Glance Edit question
Assignee:
No assignee Edit question
Last query:
2015-01-09
Last reply:
2015-01-14
Nikhil Komawar (nikhil-komawar) said : #1

Hi,

I'm not sure what details would you like to hide. The Image sharing feature that Glance supports uses the tenant ID as a base for sharing the Images with. Is there something else in specific that you are worried about?

I would recommend filing a bug and post the specifics there. If you find it to be a security/privacy issue, a private bug would be appreciated.

Thanks!

Can you help with this problem?

Provide an answer of your own, or ask b.sudhakoushik for more information if necessary.

To post a message you must log in.