Comment 12 for bug 1400966

Revision history for this message
Zhi Yan Liu (lzy-dev) wrote : Re: Glance allows users to download and delete any file in glance-api server

Hi Stuart, I'm thinking if that way/rule could be overkill for the image owner? For example, probably end user prepared/had an image content from an existing storage, then, IMO it's sensible to allow end user adds that location to own image. Am I miss any ting?