From e6ae7fc2c30aa8af087b803408359189ece58f30 Mon Sep 17 00:00:00 2001 From: Anthony Washington Date: Thu, 23 Mar 2017 22:39:11 +0000 Subject: [PATCH] Move revoke events to DocumentedRuleDefault The overall goal is to define a richer policy for deployers and operators[0]. To achieve that goal a new policy class was introduce that requires additional parameters when defining policy objects. This patch switches our revoke events policy object to the policy.DocumentedRuleDefault and fills the required policy parameters as needed. [0] I2b59f92545c5ead2a883d358f72f3ad3b3dfe1a6 Change-Id: Idfa3e5cd373c560035d03dfdef4ea303e28a92fc Partially-Implements: bp policy-docs --- keystone/common/policies/revoke_event.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/keystone/common/policies/revoke_event.py b/keystone/common/policies/revoke_event.py index 6d633d3489..861e918101 100644 --- a/keystone/common/policies/revoke_event.py +++ b/keystone/common/policies/revoke_event.py @@ -15,9 +15,12 @@ from oslo_policy import policy from keystone.common.policies import base revoke_event_policies = [ - policy.RuleDefault( + policy.DocumentedRuleDefault( name=base.IDENTITY % 'list_revoke_events', - check_str=base.RULE_SERVICE_OR_ADMIN) + check_str=base.RULE_SERVICE_OR_ADMIN, + description='List revocation events.', + operations=[{'path': '/v3/OS-REVOKE/events', + 'method': 'GET'}]) ]