openstack/cinder
Code Issues Proposed changes

Merge "Simplify composite check strings for project personas"

Browse Source
This commit is contained in:
Zuul
2021-03-07 18:05:06 +00:00
committed by Gerrit Code Review
parent 0868230f21 f8e569864f
commit a4e64d839f
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
cinder/policies/base.py
View File

@@ -68,6 +68,12 @@ SYSTEM_OR_PROJECT_MEMBER = (
SYSTEM_OR_PROJECT_READER = (
'(' + SYSTEM_READER + ') or (' + PROJECT_READER + ')'
)
LEGACY_ADMIN_OR_PROJECT_MEMBER = (
'role:admin or (role:member and project_id:%(project_id)s)'
)
LEGACY_ADMIN_OR_PROJECT_READER = (
'role:admin or (role:reader and project_id:%(project_id)s)'
)
rules = [
policy.RuleDefault('context_is_admin', 'role:admin',