nova/etc
He Jie Xu 725c54e60a Remove db layer hard-code permission checks for quota_class_create/update
This patch removes db layer hard-code permission checks for
quota_class_create/update.

For v2 API, this patch adds back-comptiable permission checks at REST
API layer.

For v2.1 API, this patch adds new rule for update method.

Partially implements bp nova-api-policy-final-part

SecurityImpact
UpgradeImpact: Due to the db layer permission checks deleted, the policy
rule "os_compute_api:os-quota-class-sets:update" was updated with
a default that match the permission as before. Admin should be notified
to update their policy configuration to keep permission as before.

Change-Id: Icddc7e5cc1c11ab3d272f61a2ef623d3f750030c
2015-07-14 20:50:08 +08:00
..
nova Remove db layer hard-code permission checks for quota_class_create/update 2015-07-14 20:50:08 +08:00