Liam Young e03501dee1 Ensure that only cloud admins are neutron admins ... When determining if a user is an admin the default neutron policy file only checks if a user has the 'admin' role. It does not check what that role is applied to. The problem is illustrated by the following scenario: A cloud admin creates a new domain, then creates a new project within that domain. The cloud admin wants to delegate the maintenance of the new project to userA so she grants them admin on the new project. UserA is now a cloud admin from Neutrons pov. To fix this issue a policy override file is added which checks that the user is admin either against the admin project (as defined by keystone) or the service project. Change-Id: If4c5b0c1ab7bf2c75e911e77531d442d417a1231 Closes-Bug: 1830536		2019-07-19 13:00:59 +00:00
..
00-admin.json	Ensure that only cloud admins are neutron admins	2019-07-19 13:00:59 +00:00
ml2_conf.ini	Enable support for security group logging	2018-10-09 12:01:03 +03:00
neutron.conf	Add support for Infoblox IPAM configuration via subordinate charm.	2019-06-20 12:03:28 -04:00