Comment 5 for bug 1400966

Revision history for this message
Stuart McLaren (stuart-mclaren) wrote : Re: Glance allows users to download and delete any file in glance-api server

Note: set_image_location policy defaults to "" -- ie allowed by anyone. We should consider changing that to admin only.