From 029261908ac5acd9950a4b027b7daec17c92854d Mon Sep 17 00:00:00 2001
From: Jake Dahn <jake@markupisart.com>
Date: Tue, 16 Aug 2011 09:15:14 -0700
Subject: making get project quotas require context which has access to the
 project/tenant)

---
 nova/db/sqlalchemy/api.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nova/db/sqlalchemy/api.py b/nova/db/sqlalchemy/api.py
index 57a4370d8..184ad60d5 100644
--- a/nova/db/sqlalchemy/api.py
+++ b/nova/db/sqlalchemy/api.py
@@ -1959,6 +1959,7 @@ def quota_get(context, project_id, resource, session=None):
 
 @require_context
 def quota_get_all_by_project(context, project_id):
+    authorize_project_context(context, project_id)
     session = get_session()
     result = {'project_id': project_id}
     rows = session.query(models.Quota).\
-- 
cgit