Earlier authority check for create volume API
Earlier authority check for create volume API

create() API in cinder/volume/api.py does the authority check
in cinder/volume/flows/api/create_volume.py.
This creates potential for disclosing information during error checking
prior to user authorization being checked.
This fix will do authority check to create() itself, so that
it is done before proceeding with the rest of code flow.

Change-Id: I27dbdf5f3ae4e3d681cdbf77df10706721254ffc
Closes-Bug: #1472031

Hybrid-Cloud/cinder,scality/cinder,NetApp/cinder,j-griffith/cinder,eharney/cinder,scality/cinder,ge0rgi/cinder,dims/cinder,dims/cinder,Paul-Ezell/cinder-1,phenoxim/cinder,mahak/cinder,bswartz/cinder,scottdangelo/RemoveVolumeMangerLocks,Datera/cinder,nikesh-mahalka/cinder,sasukeh/cinder,nikesh-mahalka/cinder,mahak/cinder,duhzecca/cinder,winndows/cinder,apporc/cinder,sasukeh/cinder,Paul-Ezell/cinder-1,Nexenta/cinder,NetApp/cinder,takeshineshiro/cinder,eharney/cinder,scottdangelo/RemoveVolumeMangerLocks,phenoxim/cinder,takeshineshiro/cinder,cloudbase/cinder,winndows/cinder,duhzecca/cinder,bswartz/cinder,Datera/cinder,openstack/cinder,Nexenta/cinder,j-griffith/cinder,cloudbase/cinder,Hybrid-Cloud/cinder,apporc/cinder,openstack/cinder