0ef4f98825
In legacy RBAC rules get of the network's router:external attribute was available for everyone (rule:regular_user). In new S-RBAC rules it was done to be available for admin users and for PROJECT_READER. This didn't really had the same result as router:external attribute wasn't visible for networks which belongs to other project. Networks which are set to be external are automatically shared with all other projects and each user from such project should be able to check every of visible networks if it is external or not. In overall, extra policy rule for "get_network:router:external" isn't really necessary and this patch removes it. Closes-Bug: #1996836 Change-Id: I5fe4a0134c6ecf5cf28e2f5d59411134546c98b0 |
||
---|---|---|
.. | ||
agent | ||
policies | ||
__init__.py |