Rules engine to enforce access control policy
Go to file
Michael Johnson 639b47198b Map system_scope in creds dictionary
An earlier patch[1] added a mapping for context 'system_scope'
to 'system' when enforce was called with a RequestContext
object. However, enforce can also be called with a creds dictionary
that may contain the context 'system_scope' element. When this
occured, 'system_scope' was not mapped to 'system' and the enforce
would fail with an InvalidScope exception.
This patch moves the 'system_scope' mapping from only occuring
with RequestContext objects to also map it when a creds dictonary
is passed to enforce.

[1] https://review.opendev.org/c/openstack/oslo.policy/+/578995

Change-Id: I83a22c3f825bad0c88018118f8630a20a445965e
(cherry picked from commit 9774108cf9)
(cherry picked from commit ff2a39fc61)
2021-10-20 15:37:35 +00:00
doc remove unicode from code 2021-01-03 16:19:18 +08:00
oslo_policy Map system_scope in creds dictionary 2021-10-20 15:37:35 +00:00
releasenotes Map system_scope in creds dictionary 2021-10-20 15:37:35 +00:00
sample_data Modernize policy checker 2019-10-10 08:38:14 -07:00
.coveragerc Fix coverage configuration and execution 2015-10-01 15:39:58 +00:00
.gitignore Move doc related modules to doc/requirements.txt 2019-07-06 18:38:54 +08:00
.gitreview Update .gitreview for stable/wallaby 2021-04-15 18:29:35 +01:00
.mailmap exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
.pre-commit-config.yaml Move flake8 as a pre-commit local target. 2021-04-15 18:29:32 +01:00
.stestr.conf Fix requirements and convert to stestr 2018-07-02 17:30:07 +00:00
.zuul.yaml Add nova/neutron project unit/functional tests job in gate 2021-02-08 17:06:07 +00:00
CONTRIBUTING.rst Fix grammar issues 2020-11-01 18:08:33 -08:00
HACKING.rst Update URLs in documents according to document migration 2017-07-12 23:01:31 +08:00
LICENSE exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
README.rst Replace git.openstack.org URLs with opendev.org URLs 2019-05-14 13:14:16 +00:00
lower-constraints.txt pre-commit: Resolve dependency conflicts 2021-01-18 15:48:28 +00:00
requirements.txt Add policy file selection logic when default changing to yaml 2020-11-19 11:30:23 -06:00
setup.cfg Add oslopolicy-convert-json-to-yaml tool 2020-08-27 16:33:29 +00:00
setup.py remove outdated header 2020-02-11 18:54:49 +01:00
test-requirements.txt pre-commit: Resolve dependency conflicts 2021-01-18 15:48:28 +00:00
tox.ini Update TOX_CONSTRAINTS_FILE for stable/wallaby 2021-04-15 18:29:35 +01:00

README.rst

Team and repository tags

image

oslo.policy

Latest Version

The Oslo Policy library provides support for RBAC policy enforcement across all OpenStack services.