openstack/keystone
Code Issues Proposed changes

Merge "Remove protocol policies from v3cloudsample.json"

Browse Source
This commit is contained in:
Zuul 2019-03-02 03:03:45 +00:00 committed by Gerrit Code Review
commit 7076d704ab
3 changed files with 22 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
etc/policy.v3cloudsample.json
View File

@ -165,12 +165,6 @@
"identity:add_endpoint_group_to_project": "rule:admin_required",
"identity:remove_endpoint_group_from_project": "rule:admin_required",
"identity:create_protocol": "rule:cloud_admin",
"identity:update_protocol": "rule:cloud_admin",
"identity:get_protocol": "rule:cloud_admin",
"identity:list_protocols": "rule:cloud_admin",
"identity:delete_protocol": "rule:cloud_admin",
"identity:get_auth_catalog": "",
"identity:get_auth_projects": "",
"identity:get_auth_domains": "",

5
keystone/tests/unit/test_policy.py
View File

@ -221,6 +221,11 @@ class PolicyJsonTestCase(unit.TestCase):
'identity:list_identity_providers',
'identity:update_identity_provider',
'identity:delete_identity_provider',
'identity:create_protocol',
'identity:get_protocol',
'identity:list_protocols',
'identity:update_protocol',
'identity:delete_protocol',
'identity:create_domain',
'identity:get_domain',
'identity:list_domains',

17
releasenotes/notes/bug-1806762-daed3e27f58f0f6d.yaml Normal file
View File

@ -0,0 +1,17 @@
---
upgrade:
- |
[`bug 1806762 <https://bugs.launchpad.net/keystone/+bug/1806762>`_]
[`bug 1804518 <https://bugs.launchpad.net/keystone/+bug/1804518>`_]
The protocol policies defined in the ``policy.v3cloudsample.json``
policy file have been removed. These policies are now obsolete after
incorporating system-scope into the federated protocol API and
implementing default roles.
fixes:
- |
[`bug 1806762 <https://bugs.launchpad.net/keystone/+bug/1806762>`_]
[`bug 1804518 <https://bugs.launchpad.net/keystone/+bug/1804518>`_]
The federated protocol policies in the ``policy.v3cloudsample.json``
policy file have been removed in favor of better defaults in code.
These policies weren't tested exhaustively and were misleading to
users and operators.