![Gabriel Hurley](/assets/img/avatar_default.png)
Instead of blindly logging out the user when any API returns a 401 or 403 response (which in most cases is due to a service being down or misconfigured) we catch the error and inform the user that they are not authorized for that data. This is separate from being unauthorized for a dashboard or panel in Horizon, since those are within our control and involve security concerns around exposing admin functionalities to end users. Those checks function as they have previously. Fixes bug 1060426. Change-Id: Ied800f10926ac5fb3b9ac1c1c26bbb4fa94a2557
71 lines
2.5 KiB
Python
71 lines
2.5 KiB
Python
# Copyright 2012 Nebula, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import glanceclient.exc as glance_exceptions
|
|
from keystoneclient import exceptions as keystone_exceptions
|
|
from novaclient import exceptions as nova_exceptions
|
|
from quantumclient.common import exceptions as quantum_exceptions
|
|
from swiftclient import client as swift_exceptions
|
|
from cinderclient import exceptions as cinder_exceptions
|
|
|
|
from .utils import TestDataContainer
|
|
|
|
|
|
def create_stubbed_exception(cls, status_code=500):
|
|
msg = "Expected failure."
|
|
|
|
def fake_init_exception(self, code, message, **kwargs):
|
|
self.code = code
|
|
self.message = message
|
|
|
|
def fake_str(self):
|
|
return str(self.message)
|
|
|
|
def fake_unicode(self):
|
|
return unicode(self.message)
|
|
|
|
cls.__init__ = fake_init_exception
|
|
cls.__str__ = fake_str
|
|
cls.__unicode__ = fake_unicode
|
|
cls.silence_logging = True
|
|
return cls(status_code, msg)
|
|
|
|
|
|
def data(TEST):
|
|
TEST.exceptions = TestDataContainer()
|
|
|
|
unauth = keystone_exceptions.Unauthorized
|
|
TEST.exceptions.keystone_unauthorized = create_stubbed_exception(unauth)
|
|
|
|
keystone_exception = keystone_exceptions.ClientException
|
|
TEST.exceptions.keystone = create_stubbed_exception(keystone_exception)
|
|
|
|
nova_exception = nova_exceptions.ClientException
|
|
TEST.exceptions.nova = create_stubbed_exception(nova_exception)
|
|
|
|
nova_unauth = nova_exceptions.Unauthorized
|
|
TEST.exceptions.nova_unauthorized = create_stubbed_exception(nova_unauth)
|
|
|
|
glance_exception = glance_exceptions.ClientException
|
|
TEST.exceptions.glance = create_stubbed_exception(glance_exception)
|
|
|
|
quantum_exception = quantum_exceptions.QuantumClientException
|
|
TEST.exceptions.quantum = create_stubbed_exception(quantum_exception)
|
|
|
|
swift_exception = swift_exceptions.ClientException
|
|
TEST.exceptions.swift = create_stubbed_exception(swift_exception)
|
|
|
|
cinder_exception = cinder_exceptions.BadRequest
|
|
TEST.exceptions.cinder = create_stubbed_exception(cinder_exception)
|