openstack
/
keystone
Code Issues Proposed changes

Move revoke events to DocumentedRuleDefault 

The overall goal is to define a richer policy for deployers
and operators[0]. To achieve that goal a new policy
class was introduce that requires additional parameters
when defining policy objects.

This patch switches our revoke events policy object to
the policy.DocumentedRuleDefault and fills the
required policy parameters as needed.

[0] I2b59f92545c5ead2a883d358f72f3ad3b3dfe1a6

Change-Id: Idfa3e5cd373c560035d03dfdef4ea303e28a92fc
Partially-Implements: bp policy-docs
This commit is contained in:
Anthony Washington 2017-03-23 22:39:11 +00:00
parent 9034755743
commit e6ae7fc2c3
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
keystone/common/policies/revoke_event.py
View File

@ -15,9 +15,12 @@ from oslo_policy import policy
from keystone.common.policies import base
revoke_event_policies = [
policy.RuleDefault(
policy.DocumentedRuleDefault(
name=base.IDENTITY % 'list_revoke_events',
check_str=base.RULE_SERVICE_OR_ADMIN)
check_str=base.RULE_SERVICE_OR_ADMIN,
description='List revocation events.',
operations=[{'path': '/v3/OS-REVOKE/events',
'method': 'GET'}])
]