109 lines
4.0 KiB
Python
109 lines
4.0 KiB
Python
# Copyright (c) 2011 OpenStack Foundation
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
"""The flavor access extension."""
|
|
|
|
import webob
|
|
|
|
from nova.api.openstack import api_version_request
|
|
from nova.api.openstack import common
|
|
from nova.api.openstack.compute.schemas import flavor_access
|
|
from nova.api.openstack import identity
|
|
from nova.api.openstack import wsgi
|
|
from nova.api import validation
|
|
from nova import exception
|
|
from nova.i18n import _
|
|
from nova.policies import flavor_access as fa_policies
|
|
|
|
|
|
def _marshall_flavor_access(flavor):
|
|
rval = []
|
|
for project_id in flavor.projects:
|
|
rval.append({'flavor_id': flavor.flavorid,
|
|
'tenant_id': project_id})
|
|
|
|
return {'flavor_access': rval}
|
|
|
|
|
|
class FlavorAccessController(wsgi.Controller):
|
|
"""The flavor access API controller for the OpenStack API."""
|
|
@wsgi.expected_errors(404)
|
|
def index(self, req, flavor_id):
|
|
context = req.environ['nova.context']
|
|
context.can(fa_policies.BASE_POLICY_NAME)
|
|
|
|
flavor = common.get_flavor(context, flavor_id)
|
|
|
|
# public flavor to all projects
|
|
if flavor.is_public:
|
|
explanation = _("Access list not available for public flavors.")
|
|
raise webob.exc.HTTPNotFound(explanation=explanation)
|
|
|
|
# private flavor to listed projects only
|
|
return _marshall_flavor_access(flavor)
|
|
|
|
|
|
class FlavorActionController(wsgi.Controller):
|
|
"""The flavor access API controller for the OpenStack API."""
|
|
|
|
@wsgi.expected_errors((400, 403, 404, 409))
|
|
@wsgi.action("addTenantAccess")
|
|
@validation.schema(flavor_access.add_tenant_access)
|
|
def _add_tenant_access(self, req, id, body):
|
|
context = req.environ['nova.context']
|
|
context.can(fa_policies.POLICY_ROOT % "add_tenant_access", target={})
|
|
|
|
vals = body['addTenantAccess']
|
|
tenant = vals['tenant']
|
|
identity.verify_project_id(context, tenant)
|
|
|
|
flavor = common.get_flavor(context, id)
|
|
|
|
try:
|
|
if api_version_request.is_supported(req, min_version='2.7'):
|
|
if flavor.is_public:
|
|
exp = _("Can not add access to a public flavor.")
|
|
raise webob.exc.HTTPConflict(explanation=exp)
|
|
flavor.add_access(tenant)
|
|
except exception.FlavorNotFound as e:
|
|
raise webob.exc.HTTPNotFound(explanation=e.format_message())
|
|
except exception.FlavorAccessExists as err:
|
|
raise webob.exc.HTTPConflict(explanation=err.format_message())
|
|
return _marshall_flavor_access(flavor)
|
|
|
|
@wsgi.expected_errors((400, 403, 404))
|
|
@wsgi.action("removeTenantAccess")
|
|
@validation.schema(flavor_access.remove_tenant_access)
|
|
def _remove_tenant_access(self, req, id, body):
|
|
context = req.environ['nova.context']
|
|
context.can(
|
|
fa_policies.POLICY_ROOT % "remove_tenant_access", target={})
|
|
|
|
vals = body['removeTenantAccess']
|
|
tenant = vals['tenant']
|
|
identity.verify_project_id(context, tenant)
|
|
|
|
# NOTE(gibi): We have to load a flavor from the db here as
|
|
# flavor.remove_access() will try to emit a notification and that needs
|
|
# a fully loaded flavor.
|
|
flavor = common.get_flavor(context, id)
|
|
|
|
try:
|
|
flavor.remove_access(tenant)
|
|
except (exception.FlavorAccessNotFound,
|
|
exception.FlavorNotFound) as e:
|
|
raise webob.exc.HTTPNotFound(explanation=e.format_message())
|
|
return _marshall_flavor_access(flavor)
|