Roman Prykhodchenko
2d0bc7fd50
Policy file contained malformed content so the policy engine failed to parse it. That was the reason of rejecting all requests, if authentication was enabled. This patch also updates policies to get rid of unused policies and use GenericCheck to check for admin API. After changes mentioned above some unused code appeared in ironic.common.policy and so it was cleaned up. Closes-bug: #1236371 Change-Id: Ie1dbda11561a9e7068d240a19f9fb98eae121c94
6 lines
119 B
JSON
6 lines
119 B
JSON
{
|
|
"admin": "role:admin or role:administrator",
|
|
"admin_api": "is_admin:True",
|
|
"default": "rule:admin_api"
|
|
}
|