neutron/neutron/tests/unit/conf/policies
Slawek Kaplonski 61b358b6b5 [S-RBAC] Add API policies for get and activate port bindings
There wasn't policies for get port binding and activate port binding API
calls defined at all.
When we switched to new default policies and regular user wanted to make
call to activate port binding, it was error 500 what we returned instead
of proper 4xx error. It was like that as "get_port_binding" call which
was done internally during "activate" API request falled back to the
default policy which is "admin_or_owner" and as port binding resource
don't have project_id, owner couldn't be checked there.

Now it has defined S-RBAC policies for those API calls and it is allowed
for admin users only to solve that problem.
This patch don't define old, deprecated policies for those API calls as
it wasn't really needed there and we already switched to new policies by
default now.

Closes-Bug: #2013326
Change-Id: Id281e4950dc5d7bac62dfa8175d82cb1f8d2e855
2023-05-29 16:29:58 +02:00
..
__init__.py Base unit test framework to test new API policy enforcement 2021-03-24 21:01:13 +00:00
test_address_group.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_address_scope.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_agent.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_auto_allocated_topology.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_availability_zone.py [S-RBAC] Get availability zone API available for READER role 2023-04-17 17:31:20 +02:00
test_base.py Update secure RBAC policies accordingly to the new guidelines 2022-01-19 12:00:53 +00:00
test_flavor.py [Secure RBAC] Fix policy to get flavors 2023-02-01 12:22:50 +01:00
test_floatingip_pools.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_floatingip_port_forwarding.py [S-RBAC] Fix new policies for FIP PFs APIs 2023-05-09 12:54:28 +02:00
test_floatingip.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_l3_conntrack_helper.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_local_ip_association.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_local_ip.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_logging.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_metering.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_ndp_proxy.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_network_ip_availability.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_network_segment_range.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_network.py Remove policy rule for get_network:router:external 2022-11-18 16:09:20 +01:00
test_port_bindings.py [S-RBAC] Add API policies for get and activate port bindings 2023-05-29 16:29:58 +02:00
test_port.py port-hints: api extension 2023-05-09 11:49:17 +02:00
test_qos.py [S-RBAC] Get QoS rule types API available for READER role 2023-05-11 11:15:29 +00:00
test_quotas.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_rbac.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_router.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_security_group.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00
test_segment.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_service_type.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_subnet.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_subnetpool.py [S-RBAC] Rename ProjectAdmin* unit tests to Admin* 2022-08-19 11:26:53 +02:00
test_trunk.py [S-RBAC] Allow admin user to do all API requests by default 2022-11-24 09:17:18 +00:00