openstack
/
nova
Code Issues Proposed changes
nova/nova/policies
History
Dan Smith 066e1e69d1 Remove system scope from all APIs 
In line with the recent RBAC working group discussion and operator
feedback, this converts all our APIs back to project-only. It leaves
the actual scope_types in place, with them all set to project. This
allows an operator to turn on scope checking to *ensure* that only
project-scoped tokens are used, in case system scope is in use
elsewhere in the deployment (i.e. for keystone or ironic). Without
this, system scoped tokens will fail some operations in strange
(read: 500 and "database error") ways.

Change-Id: I951a11affa1d1e42863967cdc713618ff0a74814
 		2022-08-24 13:12:16 +00:00
..
__init__.py api: Remove 'os-agents' API 2020-09-11 14:10:32 +01:00
admin_actions.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
admin_password.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
aggregates.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
assisted_volume_snapshots.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
attach_interfaces.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
availability_zone.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
baremetal_nodes.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
base.py Complete phase-1 of RBAC community-wide goal 2022-02-24 16:33:34 +00:00
console_auth_tokens.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
console_output.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
create_backup.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
deferred_delete.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
evacuate.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
extended_server_attributes.py Revert project-specific APIs for servers 2021-12-01 08:54:34 -08:00
extensions.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
flavor_access.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
flavor_extra_specs.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
flavor_manage.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
floating_ip_pools.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
floating_ips.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
hosts.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
hypervisors.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
instance_actions.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
instance_usage_audit_log.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
ips.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
keypairs.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
limits.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
lock_server.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
migrate_server.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
migrations.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
multinic.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
networks.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
pause_server.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
quota_class_sets.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
quota_sets.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
remote_consoles.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
rescue.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
security_groups.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
server_diagnostics.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
server_external_events.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
server_groups.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
server_metadata.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
server_password.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
server_tags.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
server_topology.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
servers.py Separate flavor extra specs policy for server APIs 2022-02-24 16:33:26 +00:00
servers_migrations.py Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
services.py Remove system scope from all APIs 2022-08-24 13:12:16 +00:00
shelve.py Allow unshelve to a specific host (REST API part) 2022-07-22 10:22:34 +02:00
simple_tenant_usage.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
suspend_server.py Server actions APIs scoped to project scope 2022-02-20 01:08:11 +00:00
tenant_networks.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
volumes.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00
volumes_attachments.py Make more project level APIs scoped to project only 2022-02-19 18:19:34 -06:00