Slawek Kaplonski 962d2539a1 Change API policy for service_type to be available for all readers ...

Service type resource don't have "project_id" so using "PROJECT_*"
rules wasn't working fine.
And this resource should be available for all users so this patch
switches its check_str to be "role:reader" which works for all
types of SYSTEM and PROJECT scope users.

Related-blueprint: bp/secure-rbac-roles
Change-Id: If28e70252c1f9ec76502699fad2d5a2aece8f4fb

2021-06-05 22:48:02 +00:00

..

__init__.py

Allow sharing of address groups via RBAC mechanism

2021-03-01 18:28:31 -06:00

address_group.py

Migrate address-group API to the new secure rbac rules

2021-03-25 14:02:25 +00:00

address_scope.py

Modify create address scope policy rule and add UT for that API

2021-03-25 08:39:33 +00:00

agent.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

auto_allocated_topology.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

availability_zone.py

Change new policy rules for availability zones API

2021-03-24 21:03:21 +00:00

base.py

Add new policy rule SG_OWNER

2021-03-08 16:03:25 +01:00

flavor.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

floatingip_pools.py

Change wrong "admin" scope in floatingip_pools to correct "system"

2021-04-23 12:50:56 +02:00

floatingip_port_forwarding.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

floatingip.py

Add missing "system" scope in some of the new API policies

2021-04-23 12:59:45 +02:00

l3_conntrack_helper.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

logging.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

metering.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

network_ip_availability.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

network_segment_range.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

network.py

Add missing "system" scope in some of the new API policies

2021-04-23 12:59:45 +02:00

port.py

Add missing "system" scope in some of the new API policies

2021-04-23 12:59:45 +02:00

qos.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

quotas.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

rbac.py

Fix new API policies for RBAC

2021-04-06 15:35:39 +02:00

router.py

Allow system_scope personas (SYSTEM_ADMIN) to create router

2021-04-12 15:16:58 +02:00

security_group.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

segment.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

service_type.py

Change API policy for service_type to be available for all readers

2021-06-05 22:48:02 +00:00

subnet.py

Move policy rules "deprecated_*" params to the DeprecatedRule

2021-03-18 21:31:56 +01:00

subnetpool.py

Fix API policy rules for new personas

2021-04-01 17:00:59 +02:00

trunk.py

Fix API policy rules for new personas

2021-04-01 17:00:59 +02:00