openstack/openstack-ansible-os_neutron
Code Issues Proposed changes

Update paste, policy and rootwrap configurations 2016-08-15

Browse Source 
Change-Id: I72fab7c6e1d128e0021654265488aba0e5f03d35
This commit is contained in:
Jesse Pretorius 2016-08-15 15:42:29 +01:00 committed by Jesse Pretorius (odyssey4me)
parent 31a0386574
commit 1b8ad7b552
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
templates/policy.json.j2
View File

@ -17,9 +17,11 @@
"create_subnet": "rule:admin_or_network_owner",
"create_subnet:segment_id": "rule:admin_only",
"create_subnet:service_types": "rule:admin_only",
"get_subnet": "rule:admin_or_owner or rule:shared",
"get_subnet:segment_id": "rule:admin_only",
"update_subnet": "rule:admin_or_network_owner",
"update_subnet:service_types": "rule:admin_only",
"delete_subnet": "rule:admin_or_network_owner",
"create_subnetpool": "",
@ -84,6 +86,7 @@
"get_port:binding:vif_details": "rule:admin_only",
"get_port:binding:host_id": "rule:admin_only",
"get_port:binding:profile": "rule:admin_only",
"get_port:ipam_segment_id": "rule:admin_only",
"update_port": "rule:admin_or_owner or rule:context_is_advsvc",
"update_port:device_owner": "not rule:network_device or rule:context_is_advsvc or rule:admin_or_network_owner",
"update_port:mac_address": "rule:admin_only or rule:context_is_advsvc",