Steve Martinelli ef48072d94 Fix cloud_admin rule and ensure only project tokens can be cloud admin ... The current rule fails to load with oslo.policy, the correct value used to determine the admin project for the cloud_admin should simply be: `is_admin_project:True`, since that is what is stored in oslo.context. This problem was masking a more serious issue that domain admin tokens could be misinterpreted as cloud admin tokens. Change-Id: I3ea562c01e06e6c519fdaec3ab6e1dac204ced71 Closes-Bug: 1547684 Closes-Bug: 1651989		2016-12-23 09:31:08 +00:00
..
__init__.py	Move token persistence classes to token.persistence module	2014-07-24 16:03:50 -07:00
test_backends.py	Allow fetching an expired token	2016-11-28 04:07:26 +00:00
test_common.py	Remove backend dependencies from token provider	2016-10-17 20:51:39 +00:00
test_fernet_provider.py	Remove issue_v3_token in favor of issue_token	2016-11-11 17:44:23 +00:00
test_token_data_helper.py	Enables token_data_helper tests for Python3	2016-02-11 06:40:35 +00:00
test_token_model.py	Fix cloud_admin rule and ensure only project tokens can be cloud admin	2016-12-23 09:31:08 +00:00
test_uuid_provider.py	Change tests to use common name for keystone.tests.unit	2015-09-04 18:21:42 +00:00