openstack/neutron
Code Issues Proposed changes

[Secure RBAC] Add shared_qos_policy rule

Browse Source 
For shared QoS policies we need to have additional rule which will allow
to list shared policies for projects which aren't owners of the QoS
policy.

Closes-bug: #2004013
Closes-bug: #2004014
Change-Id: I593896ab087e3d916b10d7d5f6b22b501060b934
This commit is contained in:
Slawek Kaplonski 2023-02-01 11:25:04 +01:00
parent 06e2e22d31
commit 221cf9497f
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
neutron/conf/policies/qos.py
View File

@ -21,9 +21,16 @@ The QoS API now supports project scope and default roles.
rules = [ rules = [
policy.RuleDefault(
'shared_qos_policy',
'field:policies:shared=True',
description='Rule of shared qos policy'),
policy.DocumentedRuleDefault( policy.DocumentedRuleDefault(
name='get_policy', name='get_policy',
check_str=base.ADMIN_OR_PROJECT_READER, check_str=base.policy_or(
base.ADMIN_OR_PROJECT_READER,
'rule:shared_qos_policy'
),
scope_types=['project'], scope_types=['project'],
description='Get QoS policies', description='Get QoS policies',
operations=[ operations=[