openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests
History
Rodolfo Alonso Hernandez 093b861bb4 Filter by owner SGs when retrieving the SG rules 
Retrieving the SG rules now is used the admin context. This allows to
get all possible rules, independently of the user calling. The filters
passed and the RBAC policies filter those results, returning only:
- The SG rules belonging to the user.
- The SG rules belonging to a SG owned by the user.

However, if the SG list is too long, the query can take a lot of time.
Instead of this, the filtering is done in the DB query. If no filters
are passed to "get_security_group_rules" and the context is not the
admin context, only the rules specified in the first paragraph will
be retrieved.

Because overwriting the method "get_objects" is too complex, an
intermediate query is done to retrieve the SG rule IDs. Those IDs
will be used as a filter in the "get_objects" call.

Conflicts:
      neutron/objects/securitygroup.py
      neutron/tests/unit/db/test_securitygroups_db.py
      neutron/tests/unit/objects/test_securitygroup.py

Closes-Bug: #1863201

Change-Id: I25d3da929f8d0b6ee15d7b90ec59b9d58a4ae6a5
(cherry picked from commit d874c46bff)
(cherry picked from commit d3905264b7)
(cherry picked from commit 61dc621c1b)
 		2020-04-17 11:05:53 +00:00
..
common Always set ovs bridge name in vif:binding-details 2020-01-02 17:14:21 +08:00
contrib Change ovs version we use in fullstack tests 2019-04-09 16:25:29 +00:00
etc List SG rules which belongs to tenant's SG 2020-02-17 12:28:08 +01:00
fullstack Increase waiting time for network rescheduling 2020-04-07 20:19:28 +00:00
functional Always set ovs bridge name in vif:binding-details 2020-01-02 17:14:21 +08:00
tempest Remove the bundled intree neutron tempest plugin 2017-11-22 12:54:33 -08:00
unit Filter by owner SGs when retrieving the SG rules 2020-04-17 11:05:53 +00:00
var
…
__init__.py Avoid eventlet monkey patching for the tempest plugin 2016-04-29 22:47:24 -05:00
base.py Handle DBConnectionError in skip_if_timeout decorator 2019-04-11 07:22:02 +00:00
fake_notifier.py FakeNotifier class 'topic' argument change to 'topics'. 2017-12-04 20:10:03 +01:00
post_mortem_debug.py
…
tools.py Router to OVO 2017-11-24 04:11:33 +00:00