openstack
/
neutron-specs
Code Issues Proposed changes

Update specs use RBAC instead of ACL in rbac-networks.rst 

In the spec document of 'rbac-networks' of Liberty release,
should be used RBAC instead of ACL

Change-Id: Idf90a87dec67d03856f41722c2044d1a6fe8bc31
Closes-Bug: #1596450
This commit is contained in:
dongwenshuai 2016-06-29 16:04:49 +08:00
parent 4e819beb9d
commit 7f6da1648b
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
specs/liberty/rbac-networks.rst
View File

@ -145,14 +145,14 @@ another tenant to share the object to more tenants.
|Attribute |Type |Access |Default |Validation/ |Description |
|Name | | |Value |Conversion | |
+=============+=======+=========+=========+============+================+
|id |string |R | auto | |id of ACL entry |
|id |string |R | auto | |id of RBAC entry|
| |(UUID) | | | | |
+-------------+-------+---------+---------+------------+----------------+
|tenant_id |string |R | auto | |owner of ACL |
|tenant_id |string |R | auto | |owner of RBAC |
| |(UUID) | | | |entry |
+-------------+-------+---------+---------+------------+----------------+
|object_id |string |RW |N/A |object |object |
| |(UUID) | | |exists |affected by ACL |
| |(UUID) | | |exists |affected by RBAC|
+-------------+-------+---------+---------+------------+----------------+
|object_type |string |RW |N/A |type has |type of object |
| | | | |rbac table | |
@ -296,7 +296,7 @@ Work Items
----------
* Add the DB model, REST API changes, UTs to the Neutron server
* Adjust existing 'shared' attribute to use rbac and add migration script
* Update the client to CRUD the ACLs
* Update the client to CRUD the RBACs
* Add API tests
@ -325,8 +325,8 @@ at the API layer without impacting the dataplane.
API Tests
---------
* Excercise basic CRUD of ACL entries
* Make sure networks are revealed and hidden as ACL entries are changed
* Excercise basic CRUD of RBAC entries
* Make sure networks are revealed and hidden as RBAC entries are changed
* Delete port of another tenant from tenant with shared network