neutron/neutron/conf
Slawek Kaplonski 61b358b6b5 [S-RBAC] Add API policies for get and activate port bindings
There wasn't policies for get port binding and activate port binding API
calls defined at all.
When we switched to new default policies and regular user wanted to make
call to activate port binding, it was error 500 what we returned instead
of proper 4xx error. It was like that as "get_port_binding" call which
was done internally during "activate" API request falled back to the
default policy which is "admin_or_owner" and as port binding resource
don't have project_id, owner couldn't be checked there.

Now it has defined S-RBAC policies for those API calls and it is allowed
for admin users only to solve that problem.
This patch don't define old, deprecated policies for those API calls as
it wasn't really needed there and we already switched to new policies by
default now.

Closes-Bug: #2013326
Change-Id: Id281e4950dc5d7bac62dfa8175d82cb1f8d2e855
2023-05-29 16:29:58 +02:00
..
agent Add rate-limiting to metadata agents 2023-05-17 18:52:25 -05:00
db Fix a number of configuration typos 2023-03-22 18:35:43 -04:00
extensions Fix a number of configuration typos 2023-03-22 18:35:43 -04:00
plugins Merge "Add host metadata haproxy manager" 2023-05-15 17:37:10 +00:00
policies [S-RBAC] Add API policies for get and activate port bindings 2023-05-29 16:29:58 +02:00
services Fix a number of configuration typos 2023-03-22 18:35:43 -04:00
__init__.py Refactoring config options for quota 2016-05-11 09:15:38 -05:00
common.py Mark "ipv6_pd_enabled" as deprecated and experimental. 2023-05-09 11:06:24 +00:00
experimental.py Mark "ipv6_pd_enabled" as deprecated and experimental. 2023-05-09 11:06:24 +00:00
profiling.py Add profiler decorator to Neutron 2019-10-31 10:05:01 -05:00
quota.py Fix a number of configuration typos 2023-03-22 18:35:43 -04:00
service.py Fix a number of configuration typos 2023-03-22 18:35:43 -04:00
wsgi.py Refactoring config options for wsgi opts 2016-08-03 19:49:58 +00:00