openstack/cyborg
Code Issues Proposed changes

Revert "Add new default policy"

Browse Source 
This patch was proposed a long time ago, it has been included in this new patch: https://review.opendev.org/#/c/740542/. 
We need to revert this patch to avoid merge conflict in the new patch.
Please help to review the new one and ignore this one.

This reverts commit c4f63f40dc5df60afee6dd4969bc326a6f2c3e84.

Change-Id: I8be73b22095d0987b019a49fb7c469ea9cd842a1
This commit is contained in:
YumengBao 2020-07-31 10:09:43 +00:00
parent f792d1c3fb
commit 40259a25ec
1 changed files with 0 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
cyborg/common/policy.py
View File

@ -66,21 +66,6 @@ default_policies = [
policy.RuleDefault('default',
'rule:admin_or_owner',
description='Default API access rule'),
policy.RuleDefault("system_admin_api",
'role:admin and system_scope:all',
"Default rule for System Admin APIs."),
policy.RuleDefault("system_reader_api",
"role:reader and system_scope:all",
"Default rule for System level read only APIs."),
policy.RuleDefault("project_reader_api",
"role:reader and project_id:%(project_id)s",
"Default rule for Project level read only APIs."),
policy.RuleDefault("system_or_project_reader",
"rule:system_reader_api or rule:project_reader_api",
"Default rule for System+Project read only APIs."),
policy.RuleDefault("project_member_api",
"role:member and project_id:%(project_id)s",
"Default rule for Project member APIs."),
]
# NOTE: to follow policy-in-code spec, we define defaults for