openstack/deb-nova
Code Issues Proposed changes

Adds missing discoverable rules in policy.json

Browse Source 
A few discoverable rules are missing in policy.json.

Change-Id: I7b020a2498a4e141d0840e2cda5bb2a87fcf5c38
This commit is contained in:
Claudiu Belu
2016-04-05 20:56:17 +03:00
parent 1c74f7415f
commit e6612df578
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
etc/nova/policy.json
View File

@@ -312,6 +312,7 @@
"os_compute_api:os-cloudpipe": "rule:admin_api",
"os_compute_api:os-cloudpipe:discoverable": "@",
"os_compute_api:os-config-drive": "rule:admin_or_owner",
"os_compute_api:os-config-drive:discoverable": "@",
"os_compute_api:os-consoles:discoverable": "@",
"os_compute_api:os-consoles:create": "rule:admin_or_owner",
"os_compute_api:os-consoles:delete": "rule:admin_or_owner",
@@ -487,5 +488,7 @@
"os_compute_api:os-assisted-volume-snapshots:delete": "rule:admin_api",
"os_compute_api:os-assisted-volume-snapshots:discoverable": "@",
"os_compute_api:os-console-auth-tokens": "rule:admin_api",
"os_compute_api:os-server-external-events:create": "rule:admin_api"
"os_compute_api:os-console-auth-tokens:discoverable": "@",
"os_compute_api:os-server-external-events:create": "rule:admin_api",
"os_compute_api:os-server-external-events:discoverable": "@"
}

3
nova/tests/unit/test_policy.py
View File

@@ -640,6 +640,7 @@ class RealRolePolicyTestCase(test.NoDBTestCase):
"os_compute_api:os-cells:discoverable",
"os_compute_api:os-certificates:discoverable",
"os_compute_api:os-cloudpipe:discoverable",
"os_compute_api:os-config-drive:discoverable",
"os_compute_api:os-consoles:discoverable",
"os_compute_api:os-console-output:discoverable",
"os_compute_api:os-remote-consoles:discoverable",
@@ -707,6 +708,8 @@ class RealRolePolicyTestCase(test.NoDBTestCase):
"os_compute_api:os-used-limits:discoverable",
"os_compute_api:os-migrations:discoverable",
"os_compute_api:os-assisted-volume-snapshots:discoverable",
"os_compute_api:os-console-auth-tokens:discoverable",
"os_compute_api:os-server-external-events:discoverable",
)
def test_all_rules_in_sample_file(self):