openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/conf/policies
History
Slawek Kaplonski 15fee2f573 Fix API policy rules for new personas 
During migration to the new personas in the API policies, we made few
mistakes and allowed creation of some resources just for PROJECT_MEMBER
role. It should also be possible for the SYSTEM_ADMIN persona and that
patch fixes it by adding SYSTEM_ADMIN persona to the default rules where
it was missing.

Related-blueprint: bp/secure-rbac-roles
Change-Id: I9f8a9f0ae24683458aa3b5f8e49c6f111ccf815a
(cherry picked from commit cabf19a984)
 		2021-04-02 14:34:50 +00:00
..
__init__.py Allow sharing of address groups via RBAC mechanism 2021-03-01 18:28:31 -06:00
address_group.py Migrate address-group API to the new secure rbac rules 2021-03-31 10:05:03 +00:00
address_scope.py Modify create address scope policy rule and add UT for that API 2021-03-31 10:04:32 +00:00
agent.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
auto_allocated_topology.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
availability_zone.py Change new policy rules for availability zones API 2021-03-24 21:03:21 +00:00
base.py Add new policy rule SG_OWNER 2021-03-08 16:03:25 +01:00
flavor.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
floatingip.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
floatingip_pools.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
floatingip_port_forwarding.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
l3_conntrack_helper.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
logging.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
metering.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
network.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
network_ip_availability.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
network_segment_range.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
port.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
qos.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
quotas.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
rbac.py Fix API policy rules for new personas 2021-04-02 14:34:50 +00:00
router.py Fix API policy rules for new personas 2021-04-02 14:34:50 +00:00
security_group.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
segment.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
service_type.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
subnet.py Move policy rules "deprecated_*" params to the DeprecatedRule 2021-03-18 21:31:56 +01:00
subnetpool.py Fix API policy rules for new personas 2021-04-02 14:34:50 +00:00
trunk.py Fix API policy rules for new personas 2021-04-02 14:34:50 +00:00