Disallow access/modify members of deleted image

It should not be possible to access or modify memberships for a
deleted image. A 404 error will now be returned if a deleted
images' members are accessed or modified.

Fixes: bug #1207266
Co-authored-by: Hirofumi Ichihara <ichihara.hirofumi@lab.ntt.co.jp>

Change-Id: I3e1a7c1cd96b8c85cf0c20286533ced510580492
Convert location meta data from pickle to string.

This patch fixes a potential security issue.
Fixes bug: 1213241

Change-Id: I6414d16ec72f26ceabbaf1364ad737f19f18381e
Ensure prop protections are read/enforced in order

Property protections need to be enforced in the order specified by the
configuration file. i.e. [^x_owner.*] should be enforced before [.*]
given the example config.

To achieve this, use a list of tuples to store the rules rather than a
dict, and also ensure to specify dict_type when parsing the
configuration file for python 2.6.

Fixes bug 1224449

Change-Id: Ib22cb34b7daef081c95717b55a991b8d613468c4
Merge "Ensure prop protections are read/enforced in order"
Merge "Disallow access/modify members of deleted image"
Require oslo.config 1.2.0 final

Now that 1.2.0 has been released, require it rather than one of the beta
release tarballs.

Closes-Bug: #1182861
Change-Id: I75ffc4a572d14488d19491a38742d6920951c171
Merge "Convert location meta data from pickle to string."
Merge "Require oslo.config 1.2.0 final"