openstack/keystone
Code Issues Proposed changes

Fix policies for groups

Browse Source 
This patch fixes a couple of broken policies in the groups resource.

Change-Id: Ia47ecc71c04bcb50c2e0d677a99b3754ffbc1c04
This commit is contained in:
Douglas Mendizábal 2024-01-25 15:37:50 -05:00
parent c89655a6d1
commit df8f8eed1e
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
keystone/common/policies/group.py
View File

@ -21,7 +21,7 @@ SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_USER_OR_OWNER = (
'user_id:%(user_id)s'
)
ADMIN_OR_SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_OR_OWNER = (
'(' + base.RULE_ADMIN_REQUIRED + ') or (' +
'(' + base.RULE_ADMIN_REQUIRED + ') or ' +
SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_USER_OR_OWNER
)
@ -32,7 +32,7 @@ SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP_USER = (
'domain_id:%(target.user.domain_id)s)'
)
ADMIN_OR_SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP = (
'(' + base.RULE_ADMIN_REQUIRED + ') or (' +
'(' + base.RULE_ADMIN_REQUIRED + ') or ' +
SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP_USER
)