Hi,

[ Reason ]
I'd like to upload Manila manila_20.0.0-3+deb13u1 to address
upstream bug:
https://wiki.openstack.org/wiki/OSSN/OSSN-0103
aka:
https://bugs.debian.org/1143804

[ Impact ]
As per upstream announce:

A non-admin user with a project-scoped token can retrieve another project's
resource lock metadata by supplying a foreign project_id in the GET
/resource-locks request. The API only enforces the all-project policy check
when the all_projects parameter is present; without it, a user-supplied
project_id reaches the database filter unchanged, bypassing project scoping.

[ Tests ]
No new tests in the patch, but the patch itself is super small.

[ Risks ]
Patch is:

+    if project_id is not None:
+        authorize_project_context(context, project_id)

in api.py. That's small enough to be trusted.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

Please allow me to upload manila/20.0.0-3+deb13u1

Cheers,

Thomas Goirand (zigo)