glance/glance/async_/flows
Dan Smith eb08fbae0f Make import task capable of running as admin on behalf of user
This makes the api_image_import task capable of running as an admin on
behalf of a user if so authorized by the API. It includes a new object
called ImportActionWrapper which provides a bundle of utility methods
which can be run either against the user-authorized or admin-authorized
ImageRepo passed in from the API. It encapsulates all the actions
we are able and willing to run as an admin for the user.

This is currently not drivable by the API because the policy check is
still statically defined as "admin or owner" but this change is
offered without any needed modification to the functional tests to
prove that it does not regress existing functionality. The following
patch will introduce a more robust knob for allowing users to do this,
and it brings the functional test changes with it.

Changes:
 - Removed the change to the images API to pass in an admin repo
 - Reinstated the ImportActionWrapper usage that was removed from
   backport commit 2b3ce07c32

Change-Id: Iac75956e314ec6f41db18430486bd8be9754e780
(cherry picked from commit 2fd0c25733)
2020-08-25 11:26:41 -07:00
..
_internal_plugins Fix: Interrupted copy-image leaking data on subsequent operation 2020-07-06 05:43:06 +00:00
plugins Do not decompress 'compressed' containers 2020-04-07 10:46:30 +01:00
__init__.py Rename async package to async_ 2018-08-07 14:42:14 -04:00
api_image_import.py Make import task capable of running as admin on behalf of user 2020-08-25 11:26:41 -07:00
base_import.py Rethinking filesystem access 2019-10-01 09:53:48 +00:00
convert.py Rethinking filesystem access 2019-10-01 09:53:48 +00:00
introspect.py Rename async package to async_ 2018-08-07 14:42:14 -04:00
ovf_process.py Rethinking filesystem access 2019-10-01 09:53:48 +00:00