openstack/nova
Code Issues Proposed changes

policy: Replaces 'authorize' in nova-api (part 1)

Browse Source 
Updates nova.api.openstack.compute modules to use the
context's 'can' method instead of the existing
'authorize' function.

Co-Authored-By: Andrew Laski <andrew@lascii.com>

Change-Id: I834cff54c1bc079b566cb66b4173d4cf109bc686
Partially-Implements: bp policy-in-code
This commit is contained in:
Claudiu Belu
2016-06-13 08:29:47 +03:00
parent 89a3cd86cc
commit 8473204b23
8 changed files with 34 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
nova/api/openstack/compute/assisted_volume_snapshots.py
View File

@@ -26,10 +26,10 @@ from nova.api.openstack import wsgi
from nova.api import validation
from nova import compute
from nova import exception
from nova.policies import assisted_volume_snapshots as avs_policies
ALIAS = 'os-assisted-volume-snapshots'
authorize = extensions.os_compute_authorizer(ALIAS)
class AssistedVolumeSnapshotsController(wsgi.Controller):
@@ -44,7 +44,7 @@ class AssistedVolumeSnapshotsController(wsgi.Controller):
def create(self, req, body):
"""Creates a new snapshot."""
context = req.environ['nova.context']
authorize(context, action='create')
context.can(avs_policies.POLICY_ROOT % 'create')
snapshot = body['snapshot']
create_info = snapshot['create_info']
@@ -62,7 +62,7 @@ class AssistedVolumeSnapshotsController(wsgi.Controller):
def delete(self, req, id):
"""Delete a snapshot."""
context = req.environ['nova.context']
authorize(context, action='delete')
context.can(avs_policies.POLICY_ROOT % 'delete')
delete_metadata = {}
delete_metadata.update(req.GET)