nova/etc/nova
He Jie Xu 725c54e60a Remove db layer hard-code permission checks for quota_class_create/update
This patch removes db layer hard-code permission checks for
quota_class_create/update.

For v2 API, this patch adds back-comptiable permission checks at REST
API layer.

For v2.1 API, this patch adds new rule for update method.

Partially implements bp nova-api-policy-final-part

SecurityImpact
UpgradeImpact: Due to the db layer permission checks deleted, the policy
rule "os_compute_api:os-quota-class-sets:update" was updated with
a default that match the permission as before. Admin should be notified
to update their policy configuration to keep permission as before.

Change-Id: Icddc7e5cc1c11ab3d272f61a2ef623d3f750030c
2015-07-14 20:50:08 +08:00
..
rootwrap.d Add nova-idmapshift to rootwrap filters 2015-05-17 17:02:22 +08:00
README-nova.conf.txt fix the extension of README in etc/nova 2014-03-25 15:01:51 -07:00
api-paste.ini Drop use of 'oslo' namespace package 2015-04-28 22:14:07 +00:00
cells.json Remove trailing comma from sample JSON 2014-02-26 10:17:01 +08:00
logging_sample.conf Remove references to suds 2015-06-15 16:32:23 +03:00
nova-config-generator.conf Unfudge tox -e genconfig wrt missing versionutils module 2015-06-26 08:28:46 -07:00
policy.json Remove db layer hard-code permission checks for quota_class_create/update 2015-07-14 20:50:08 +08:00
release.sample Allow loading of product/vendor/package info from external file 2012-12-19 18:54:33 +00:00
rootwrap.conf Fix invalid facilities documented in rootwrap.conf 2014-02-16 13:30:14 -08:00