this patch introduces an oslo.policy-based API access policy
enforcement engine to ironic-inspector.
As part of implementation, a proper oslo.context-based request
context is also generated and assigned to each request.
Short overview of changes:
- added custom RequestContext class
- extends oslo.context to handle of "is_public_api" flag
(False by default)
- added context to request in each API route
- '/continue' api sets the "is_public_api" flag to True
- added documented definitions for API access policies and their
defaults
- added enforcement of these policies on API requests
- added oslo.policy-specific entry points to setup.cfg
- added autogenerated policy sample file with defaults
- added documentation with autogenerated policies
Change-Id: Iff6f98fa9950d78608f0a7c325d132c11a1383b3
Closes-Bug: #1719812
45 lines
399 B
Plaintext
45 lines
399 B
Plaintext
# Compiled files
|
|
*.py[co]
|
|
*.a
|
|
*.o
|
|
*.so
|
|
|
|
# Sphinx
|
|
_build
|
|
doc/source/contributor/api/
|
|
doc/source/_static/*.sample
|
|
|
|
# release notes build
|
|
releasenotes/build
|
|
|
|
# Packages/installer info
|
|
*.egg
|
|
*.egg-info
|
|
dist
|
|
build
|
|
eggs
|
|
parts
|
|
var
|
|
sdist
|
|
develop-eggs
|
|
.installed.cfg
|
|
.eggs/
|
|
|
|
# Other
|
|
*.DS_Store
|
|
.idea
|
|
.stestr
|
|
.testrepository
|
|
.tox
|
|
.venv
|
|
.*.swp
|
|
.coverage
|
|
cover
|
|
AUTHORS
|
|
ChangeLog
|
|
*.sqlite
|
|
*~
|
|
|
|
# Vagrant
|
|
.vagrant
|