openstack
/
keystone
Code Issues Proposed changes
keystone/keystone/tests/unit
History
Anthony Washington c734b58581 Policy in code 
Adding the beginning implementation for registering and using
default policy rules in code. Rules are defined in the new
policies module and added to the return list __init__.py.
Default policies can now be maintained in code and registered
via listing mechanisms in the policies module. As we go, we
can remove the duplicated default policies from our policy.json
file.

This commit specifically:
- Creates a new module called `policies` to hold our in code defaults.
- Ensure we pass our in code policy list to our policy ENFORCER.
- Add base policy module for common policy rules.
- Add service default policy module for policy rules.
- Add endpoint default policy module for policy rules.
- Add regions default policy module for policy rules.

partially-implements blueprint policy-in-code
Co-Authored-By: Richard Avelar csravelar@gmail.com
Change-Id: Ic47b1e8b0d479032d8a7b9891ed9800be7036d94
 		2017-03-22 22:19:58 +00:00
..
assignment Removing group role assignments results in overly broad revocation events 2017-03-02 04:59:32 -05:00
auth Cleanup TODO about auth.controller code moved to core 2017-01-31 16:52:36 +00:00
backend Remove stable driver interfaces 2016-09-28 17:18:37 +00:00
catalog Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
common Add in-code comment to clarify pattern in tests 2017-03-08 20:56:44 +00:00
config_files Remove LDAP write support 2017-01-21 21:32:07 -05:00
contrib Adds tests showing how mapping locals are handled 2017-01-26 20:42:12 +00:00
credential fix credentials backend tests 2016-11-04 09:08:31 -05:00
endpoint_policy Fixes remaining nits in endpoint_policy tests 2016-11-15 20:03:47 +00:00
external Adds interface tests for timeutils 2015-09-23 12:43:37 +00:00
federation Validate mapping exists when creating/updating a protocol 2016-10-20 19:12:04 +00:00
identity Remove password_expires_ignore_user_ids 2017-03-03 11:02:29 -05:00
ksfixtures Policy in code 2017-03-22 22:19:58 +00:00
policy Create unit tests for the policy drivers 2016-08-09 11:59:20 -03:00
resource Clear the project ID from user information 2017-02-24 19:00:31 +00:00
saml2 Add openstack_user_domain to assertion 2015-05-04 14:33:48 -03:00
schema Rename v2 token schema used for validation 2016-03-10 21:41:22 +00:00
tests Adds a skip method to identify useless skips 2016-06-29 19:48:12 +00:00
token Merge "Change is_admin_project to False by default" 2017-03-09 18:19:17 +00:00
trust Use more specific asserts in tests 2016-08-04 12:48:08 +02:00
__init__.py enable ldap tests for py3 2016-05-18 12:07:23 -04:00
core.py Merge "Fix multiple uuid warnings with pycadf" 2017-02-17 20:03:39 +00:00
default_catalog.templates Move existing tests to unit 2015-02-13 15:54:29 -06:00
default_fixtures.py Fix MFA rule checks for LDAP auth 2017-02-24 00:55:32 -05:00
fakeldap.py Correct some typo errors 2017-02-10 17:41:05 +00:00
federation_fixtures.py Move existing tests to unit 2015-02-13 15:54:29 -06:00
filtering.py Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
identity_mapping.py Use the new enginefacade from oslo.db 2016-02-24 08:20:12 -08:00
mapping_fixtures.py Merge "Catch potential SyntaxError in federation mapping" 2017-01-26 09:21:08 +00:00
rest.py Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
test_associate_project_endpoint_extension.py Remove EndpointFilterCatalog 2017-02-27 11:21:50 -05:00
test_auth.py Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
test_auth_plugin.py Cleanup TODO, AuthContext and AuthInfo to auth.core 2017-01-31 16:52:41 +00:00
test_backend_endpoint_policy.py Use new_policy_ref consistently 2015-12-09 10:18:36 -08:00
test_backend_endpoint_policy_sql.py Fixes the SQL model tests 2015-03-08 05:34:48 +00:00
test_backend_federation_sql.py Require domain_id when registering Identity Providers 2017-01-06 16:05:12 +00:00
test_backend_id_mapping_sql.py Do not call `to_dict` outside of a session context 2017-01-25 06:12:20 +00:00
test_backend_ldap.py Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
test_backend_ldap_pool.py Code-Defined Resource-specific Options 2017-01-25 16:15:44 -08:00
test_backend_rules.py Split policy backend tests 2016-03-04 15:32:42 -03:00
test_backend_sql.py Refactor shadow users tests 2017-01-25 16:11:01 +00:00
test_backend_templated.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_catalog.py Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
test_cert_setup.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_cli.py Address db_sync check against new install 2017-02-14 16:10:19 +00:00
test_config.py Using assertIsNone() instead of assertIs(None) 2016-09-26 15:33:18 +07:00
test_contrib_s3_core.py Fix the s3tokens endpoint 2017-02-22 16:16:06 +00:00
test_contrib_simple_cert.py Fixes to get cert tests running in Py3 2016-03-02 02:11:02 +00:00
test_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_driver_hints.py Use assertTrue/False instead of assertEqual(T/F) 2015-11-02 09:10:38 +00:00
test_entry_points.py remove deprecated items from contrib 2016-09-27 11:55:41 +03:00
test_exception.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_hacking_checks.py Use public interfaces of pep8 for hacking 2017-01-09 16:30:01 +00:00
test_ldap_livetest.py Remove releated role_tree_dn test 2017-01-21 23:16:38 +08:00
test_ldap_pool_livetest.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_ldap_tls_livetest.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
test_middleware.py Deprecate (and emit message) AdminTokenAuthMiddleware 2017-02-09 18:16:48 +00:00
test_no_admin_token_auth.py Deprecate keystone.common.kvs 2016-05-12 23:30:15 -07:00
test_policy.py Policy in code 2017-03-22 22:19:58 +00:00
test_revoke.py Fix the typo 2017-03-09 16:59:15 +08:00
test_shadow_users.py Refactor shadow users tests 2017-01-25 16:11:01 +00:00
test_sql_banned_operations.py Rename protocol cascade delete migration file 2017-02-17 14:04:59 +00:00
test_sql_upgrade.py Merge "Ensure migration file names are unique to avoid caching errors" 2017-02-28 15:17:59 +00:00
test_token_bind.py Change tests to use common name for keystone.tests.unit 2015-09-04 18:21:42 +00:00
test_token_provider.py Switch fernet to be the default token provider. 2016-11-02 00:33:24 +00:00
test_url_middleware.py Fix D401 PEP8 violation. 2016-04-14 20:08:52 +00:00
test_v2.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_v2_controller.py Use request.params instead of context['query_string'] 2016-06-29 04:46:57 +10:00
test_v2_validation.py Fix v2 role create schema validation 2017-02-23 23:38:32 -06:00
test_v3.py Fix the s3tokens endpoint 2017-02-22 16:16:06 +00:00
test_v3_assignment.py Removing group role assignments results in overly broad revocation events 2017-03-02 04:59:32 -05:00
test_v3_auth.py Policy in code 2017-03-22 22:19:58 +00:00
test_v3_catalog.py Fix multiple uuid warnings with pycadf 2017-02-08 21:16:43 -06:00
test_v3_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_v3_domain_config.py Implement password requirements API 2016-12-15 19:51:41 +00:00
test_v3_endpoint_policy.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_federation.py Include 'token' in the method list for federated scoped tokens 2017-02-09 20:37:05 +00:00
test_v3_filters.py Add password expiration queries for PCI-DSS 2017-01-24 09:01:12 -06:00
test_v3_identity.py Deprecate (and emit message) AdminTokenAuthMiddleware 2017-02-09 18:16:48 +00:00
test_v3_oauth1.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_os_revoke.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_policy.py Implement HEAD method for all v3 GET actions 2016-03-22 10:27:53 -07:00
test_v3_protection.py listing revoke events should be admin only 2017-01-09 21:12:47 +00:00
test_v3_resource.py Remove CONF.domain_id_immutable 2017-01-03 22:51:15 +00:00
test_v3_trust.py Invalidate trust when the related project is deleted 2016-10-14 16:55:06 +00:00
test_validation.py Add validation for mfa rule validator (storage) 2017-01-31 08:49:35 -08:00
test_versions.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_wsgi.py Include the requested URL in authentication errors 2017-03-20 21:07:32 -04:00
utils.py Add new functionality to @wip 2016-05-22 16:06:50 +00:00