CiscoSystems/ceilometer — pull request #1 by retr0h (2014-07-31 20:38:20+00:00)
Title: Disable POST samples by non-admin users to meters

Enabling users with non-admin privilege to execute this method can potentially
cause "denial of service" attack, a serious security vulnerability.

Background:

The current implementation of Ceilometer allows non-admin users to add
user-defined metrics to be reported on by Ceilometer. There is currently
no mechanism to limit/rate such operation making it easier for a rogue
user to launch denial of service attacks. Limiting operation to admin
users only mitigates this thread.

Implements: rally-user-story US4145
Implements: rally-task TA3484