nova/nova/tests/unit/api
Ghanshyam Mann ab084d4d1d Modify remaining APIs as per RBAC new guidelines
As per the RBAC new direction, we will allow
project resources operation to be performed by
the project scoped token only and system user will
be allowed to perform system level operation only
not project resources specific.

Details about new direction can be found in community-wide
goal
- https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html

This commit modify remaining APIs as per the new guidelines.

Also, allow all project admin to list the other project limits. This is
what we allowed in legacy policy and until we have domain admin or other
way to list other project resources/info, we will keep that behaviour.

Also modifying and adding tests for four cases:
1. enforce_scope=False + legacy rule (current default policies)
2. enforce_scope=False + No legacy rule
3. enforce_scope=True + legacy rule
4. enforce_scope=True + no legacy rule (end goal of new RBAC)

Partial implement blueprint policy-defaults-refresh-2

Change-Id: I006d47aa2f4678a06c78057bcf407302abbe4907
2022-02-24 10:24:55 -06:00
..
openstack Modify remaining APIs as per RBAC new guidelines 2022-02-24 10:24:55 -06:00
validation objects: Add 'socket' PCI NUMA affinity 2021-02-24 10:23:33 +00:00
__init__.py
test_auth.py Deprecate [api]auth_strategy and noauth2 2019-10-09 15:16:07 -05:00
test_compute_req_id.py Migrate to oslo request_id middleware - mv 2.46 2017-05-27 10:11:44 +00:00
test_wsgi.py Support sys.argv in wsgi app 2020-11-25 12:22:41 +01:00