openstack/cinder
Code Issues Proposed changes

Add upload_image API role-based access policy

Browse Source 
This patch adds role-based access policy for
upload_image API to etc/cinder/policy.json file.

"volume_extension:volume_actions:upload_image": "rule:admin_or_owner",

cinder/tests/unit/policy.json file already has
policy for this API.

Change-Id: I6ef30f870fe6bf1bcb818d254697ead8dc461ab6
Closes-Bug: #1578856
This commit is contained in:
Mitsuhiro Tanino 2016-05-05 19:06:48 -04:00
parent 8091e9f737
commit 3a9dc30de9
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/cinder/policy.json
View File

@ -53,6 +53,7 @@
"volume_extension:volume_admin_actions:migrate_volume_completion": "rule:admin_api",
"volume_extension:volume_actions:upload_public": "rule:admin_api",
"volume_extension:volume_actions:upload_image": "rule:admin_or_owner",
"volume_extension:volume_host_attribute": "rule:admin_api",
"volume_extension:volume_tenant_attribute": "rule:admin_or_owner",