Pavlo Shchelokovskyy 198ef70c2b
Add request context and policy enforcement ...
this patch introduces an oslo.policy-based API access policy
enforcement engine to ironic-inspector.
As part of implementation, a proper oslo.context-based request
context is also generated and assigned to each request.
Short overview of changes:
- added custom RequestContext class
- extends oslo.context to handle of "is_public_api" flag
(False by default)
- added context to request in each API route
- '/continue' api sets the "is_public_api" flag to True
- added documented definitions for API access policies and their
defaults
- added enforcement of these policies on API requests
- added oslo.policy-specific entry points to setup.cfg
- added autogenerated policy sample file with defaults
- added documentation with autogenerated policies
Change-Id: Iff6f98fa9950d78608f0a7c325d132c11a1383b3
Closes-Bug: #1719812
2017-10-13 11:55:52 +00:00
2015-11-26 10:12:14 +01:00
2016-02-09 15:30:46 +01:00
2017-08-15 10:17:47 +03:00
2017-08-15 10:17:47 +03:00
2017-02-13 16:00:51 -05:00
2016-07-29 15:00:22 +01:00
2017-08-15 10:17:47 +03:00
2017-08-15 10:17:47 +03:00
2017-02-13 16:00:51 -05:00
2016-07-19 19:44:06 +08:00
2017-09-01 15:33:24 +02:00
2017-01-26 12:54:46 +01:00
2016-06-06 13:18:09 +00:00
2017-02-13 16:00:51 -05:00
2016-08-11 14:27:36 +03:00
2015-12-14 14:19:06 +01:00
2016-01-26 17:01:41 +01:00
2016-06-08 09:56:37 +02:00
2016-03-14 15:29:09 +01:00
2016-07-01 14:30:44 +02:00
2016-03-08 15:12:47 +01:00
2016-03-09 00:04:41 +08:00
2017-01-17 14:01:25 +01:00
2017-01-27 10:22:55 +01:00
2016-03-16 12:19:10 +01:00
2015-12-15 14:25:27 +01:00
2016-03-22 12:08:09 +00:00
2016-02-22 14:21:09 +02:00
2017-09-04 14:43:13 +02:00
2017-08-10 10:33:58 +02:00
2016-03-01 14:00:31 +02:00
2016-02-17 19:07:30 +02:00
2016-02-12 10:11:49 +01:00
2016-04-15 14:03:46 +02:00
2017-02-13 16:00:51 -05:00
2016-09-30 16:39:41 +01:00
2017-03-24 14:25:13 +02:00
2016-08-17 11:51:46 +02:00
2017-02-13 16:00:51 -05:00
2015-11-27 12:56:13 +01:00
2017-02-13 16:00:51 -05:00
2016-06-14 11:23:03 +03:00
2017-03-02 14:12:09 +02:00
2015-11-27 12:56:13 +01:00
2016-03-02 15:40:01 +01:00
2016-02-09 12:36:07 +01:00
2017-04-26 19:13:52 +02:00
2017-02-13 16:00:51 -05:00
2017-08-15 10:17:47 +03:00
2017-02-13 16:00:51 -05:00
2017-02-13 16:00:51 -05:00
2016-01-13 17:30:56 +01:00
2015-11-27 12:56:13 +01:00
2017-08-15 10:17:47 +03:00
2016-12-16 16:55:51 +00:00
2016-05-04 14:26:15 +02:00
2016-03-25 13:08:15 +02:00
2016-02-09 15:04:53 +01:00
2016-03-10 11:58:40 +02:00
2015-12-14 14:24:49 +01:00
2016-03-18 13:41:04 +01:00
2017-01-17 13:50:46 +01:00
2015-11-27 12:56:13 +01:00
2015-11-27 12:56:13 +01:00
2017-02-10 17:24:27 +01:00
2016-05-09 15:01:31 +02:00
2016-03-25 13:37:49 +02:00
2016-03-11 15:06:04 +02:00
2016-02-11 16:18:57 +01:00
2016-06-06 13:36:05 +02:00
2016-02-16 11:12:23 +01:00
2016-06-06 19:07:24 +02:00
2015-11-27 12:05:27 +01:00
2017-01-26 17:08:56 +01:00
2016-02-10 10:59:02 +02:00
2016-09-01 10:55:02 +02:00
2017-08-15 10:17:47 +03:00
2017-10-13 11:55:52 +00:00
2017-04-11 17:58:56 +02:00
2015-12-09 17:31:47 +01:00
2015-12-14 14:19:43 +01:00
2016-01-13 12:23:15 +01:00
2017-08-15 10:17:47 +03:00
2016-05-04 12:46:59 +02:00
2017-03-07 21:28:13 +00:00
2016-04-07 10:40:55 +02:00
2017-08-15 10:17:47 +03:00
2017-05-16 16:47:00 +02:00
2017-05-17 18:33:34 +02:00
2016-02-29 13:48:55 +01:00
2016-09-06 16:08:03 +03:00
2016-05-23 13:05:18 +02:00
2015-11-27 11:56:36 +02:00
2017-08-15 10:17:47 +03:00
2017-02-13 16:00:51 -05:00
198ef70c2b