Slawek Kaplonski c4618857b0 Add ADMIN role and remove scope from the check strings ... This patch should finally complete phase 1 of Secure RBAC community goal [1] where it was agreed that there will be just 4 personas: * ADMIN * PROJECT_ADMIN * PROJECT_MEMBER * PROJECT_READER System scope personas will be added in next phases of the community goal. To complete phase 1 in Neutron, this patch removes hardcoded system scope from the check strings in system scope personas - that way it can be controlled by the config option and enforced by oslo_policy only when enabled. It also skips all SYSTEM_MEMBER and SYSTEM_READER related unit tests. We can re-enable them in the future where we will have those personas working in Neutron. [1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#phase-1 Change-Id: Iafa8ec1d9710ff404450ad0a64baf56a0f993756		2022-04-11 10:48:05 +00:00
..
agent	Agent common config	2017-03-15 09:52:18 -06:00
policies	Add ADMIN role and remove scope from the check strings	2022-04-11 10:48:05 +00:00
__init__.py	Base unit test framework to test new API policy enforcement	2021-03-24 21:01:13 +00:00