)]}'
{"api-ref/src/wadls/image-api/src/v2/os-image-v2.wadl":[{"author":{"_account_id":841,"name":"Akihiro Motoki","email":"amotoki@gmail.com","username":"amotoki"},"change_message_id":"a61d1b164d627719a91e2927f55ce5029fe31745","unresolved":false,"context_lines":[{"line_number":1115,"context_line":"                  owner of The image, the request returns the HTTP"},{"line_number":1116,"context_line":"                  403 error code. Ensure that you meet the preconditions"},{"line_number":1117,"context_line":"                  and run the request again. If the request fails again,"},{"line_number":1118,"context_line":"                  review your API request."},{"line_number":1119,"context_line":"               \u003c/para\u003e"},{"line_number":1120,"context_line":"            \u003c/listitem\u003e"},{"line_number":1121,"context_line":"         \u003c/itemizedlist\u003e"}],"source_content_type":"text/xml","patch_set":1,"id":"9a8ffd7b_f3e8a37e","side":"PARENT","line":1118,"updated":"2015-11-25 13:15:35.000000000","message":"just question for clarification: is 403 never returned even if a given image ID is owned by other projects?","commit_id":"9eacefcd5ff646d7ef5c198337337bf31f0443b2"},{"author":{"_account_id":841,"name":"Akihiro Motoki","email":"amotoki@gmail.com","username":"amotoki"},"change_message_id":"535bf4daa2f2f887e38b4d0f19c743805396deab","unresolved":false,"context_lines":[{"line_number":1115,"context_line":"                  owner of The image, the request returns the HTTP"},{"line_number":1116,"context_line":"                  403 error code. Ensure that you meet the preconditions"},{"line_number":1117,"context_line":"                  and run the request again. If the request fails again,"},{"line_number":1118,"context_line":"                  review your API request."},{"line_number":1119,"context_line":"               \u003c/para\u003e"},{"line_number":1120,"context_line":"            \u003c/listitem\u003e"},{"line_number":1121,"context_line":"         \u003c/itemizedlist\u003e"}],"source_content_type":"text/xml","patch_set":1,"id":"9a8ffd7b_a573a3e6","side":"PARENT","line":1118,"in_reply_to":"9a8ffd7b_c5990770","updated":"2015-11-25 16:40:00.000000000","message":"It might be beyond the scope of api-site change, but I would like to comment here so that someone can move things forward in a corresponding project.\n\nAssume that userB (in your example) refers to a private image id3.\nTheoretically speaking, 404 should be returned. It is because returning 403 leaks information that an image whose id is image_id3 exists. In Neutron, 404 is returned in this case.","commit_id":"9eacefcd5ff646d7ef5c198337337bf31f0443b2"},{"author":{"_account_id":13702,"name":"yushiro","username":"yushiro","inactive":true},"change_message_id":"22ee7004e1abb303cf93f00051454295e54eab92","unresolved":false,"context_lines":[{"line_number":1115,"context_line":"                  owner of The image, the request returns the HTTP"},{"line_number":1116,"context_line":"                  403 error code. Ensure that you meet the preconditions"},{"line_number":1117,"context_line":"                  and run the request again. If the request fails again,"},{"line_number":1118,"context_line":"                  review your API request."},{"line_number":1119,"context_line":"               \u003c/para\u003e"},{"line_number":1120,"context_line":"            \u003c/listitem\u003e"},{"line_number":1121,"context_line":"         \u003c/itemizedlist\u003e"}],"source_content_type":"text/xml","patch_set":1,"id":"9a8ffd7b_c5990770","side":"PARENT","line":1118,"in_reply_to":"9a8ffd7b_f3e8a37e","updated":"2015-11-25 16:32:08.000000000","message":"I\u0027ve verified and I realized 403 definitely happened.  Therefore, I\u0027ll fix this API should return 403 and 404.  Thanks for your notification.\n\nHowever, other project user can refer the another project\u0027s image ID.  For example...\n\n* userA at projectA executes GET v2/images\n\nResult:  image_id1(public), image_id2(public), image_id3(private)  (visibility)\n\n* userB at projectB executes GET v2/images\n\nResult:  image_id1(public), image_id2(public)  (visibility)\n\nIn this case, the userB can refer image_id3. (GET v2/images/{image_id3})\n\nI think it should not be referred.","commit_id":"9eacefcd5ff646d7ef5c198337337bf31f0443b2"}]}