Glance

  1. Series juno
  2. Bug #1400966
  3. Comment #10

Comment 10 for bug 1400966

Revision history for this message
Flavio Percoco (flaper87) wrote : Re: Glance allows users to download and delete any file in glance-api server

I agree with Zhi that a good, quick and probably most importantly *backportable* solution would be to add a similar check in v2 as we have in v1.

A future follow-up patch should a a proper verification process in the store code and make the server side use it.