Merge "Fix RBAC for transportkeys resource"

barbican/common/policies/transportkeys.py

@@ -12,14 +12,14 @@
 
 from oslo_policy import policy
 
-
+_READER = "role:reader"
 _SYSTEM_ADMIN = "role:admin and system_scope:all"
 
 rules = [
     policy.DocumentedRuleDefault(
         name='transport_key:get',
-        check_str='rule:all_users',
-        scope_types=[],
+        check_str='rule:all_users or {_READER}',
+        scope_types=['project', 'system'],
         description='Get a specific transport key.',
         operations=[
             {
@@ -42,8 +42,8 @@ rules = [
     ),
     policy.DocumentedRuleDefault(
         name='transport_keys:get',
-        check_str='rule:all_users',
-        scope_types=[],
+        check_str='rule:all_users or {_READER}',
+        scope_types=['project', 'system'],
         description='Get a list of all transport keys.',
         operations=[
             {