openstack/cinder
Code Issues Proposed changes

Added 'volume:get_transfer' to policy.json file

Browse Source 
volume:get_transfer is not enforced by the cinder
policy.json file

Change-Id: I8631e3615be40b944539b14ac5eb2ed98ab266b5
Closes-Bug: #1570903
This commit is contained in:
Tin Lam
2016-04-17 07:13:51 -05:00
parent 8091e9f737
commit 394ea5a61b
3 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
cinder/tests/unit/policy.json
View File

@@ -83,6 +83,7 @@
"volume:create_transfer": "",
"volume:accept_transfer": "",
"volume:delete_transfer": "",
"volume:get_transfer": "",
"volume:get_all_transfers": "",
"backup:create" : "",

1
cinder/transfer/api.py
View File

@@ -57,6 +57,7 @@ class API(base.Base):
super(API, self).__init__(db_driver)
def get(self, context, transfer_id):
volume_api.check_policy(context, 'get_transfer')
rv = self.db.transfer_get(context, transfer_id)
return dict(rv)

1
etc/cinder/policy.json
View File

@@ -69,6 +69,7 @@
"volume:create_transfer": "rule:admin_or_owner",
"volume:accept_transfer": "",
"volume:delete_transfer": "rule:admin_or_owner",
"volume:get_transfer": "rule:admin_or_owner",
"volume:get_all_transfers": "rule:admin_or_owner",
"volume_extension:replication:promote": "rule:admin_api",