neutron/neutron/api/v2
Slawek Kaplonski e00ebee053 List SG rules which belongs to tenant's SG
In case when user's security group contains rules created e.g.
by admin, and such rules has got admin's tenant as tenant_id,
owner of security group should be able to see those rules.
Some time ago this was addressed for request:

GET /v2.0/security-groups/<sec_group_id>

But it is also required to behave in same way for

GET /v2.0/security-group-rules

So this patch fixes this behaviour for listing of security
group rules.
To achieve that this patch also adds new policy rule:
ADMIN_OWNER_OR_SG_OWNER which is similar to already existing
ADMIN_OWNER_OR_NETWORK_OWNER used e.g. for listing or creating
ports.

Conflicts:
    etc/policy.json
    neutron/policy.py

Change-Id: I09114712582d2d38d14cf1683b87a8ce3a8e8c3c
Closes-Bug: #1824248
(cherry picked from commit b898d2e3c0)
(cherry picked from commit 36d1086569)
2020-02-17 12:28:08 +01:00
..
__init__.py Remove invalid copyright headers under API module 2014-04-02 11:09:03 -07:00
attributes.py List SG rules which belongs to tenant's SG 2020-02-17 12:28:08 +01:00
base.py use callback payloads for REQUEST/RESPONSE events 2017-12-24 07:27:11 +00:00
resource.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
resource_helper.py use service type constants from neutron_lib plugins 2017-06-27 15:16:05 -06:00
router.py Delete dead API v2 router code 2017-09-13 15:11:49 -07:00