openstack/placement
Code Issues Proposed changes

API: remove admin require from certificate_* from db layer

Browse Source 
This patch removes require_admin_context decorator certificate_* because, they
are only called by nova code, no user interface code (REST API layer) will
call these methods, so there is no require to hard limit admin context to
query db.

Partially implements bp nova-api-policy-final-part
Change-Id: I2536f31096d4322390c6f00f4019dbabcb11226e
This commit is contained in:
Eli Qiao 2015-04-23 15:21:54 +08:00
parent 27d432d96b
commit a3927b5fb5
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nova/db/sqlalchemy/api.py
View File

@ -692,7 +692,6 @@ def compute_node_statistics(context):
###################
@require_admin_context
def certificate_create(context, values):
certificate_ref = models.Certificate()
for (key, value) in values.iteritems():
@ -701,21 +700,18 @@ def certificate_create(context, values):
return certificate_ref
@require_admin_context
def certificate_get_all_by_project(context, project_id):
return model_query(context, models.Certificate, read_deleted="no").\
filter_by(project_id=project_id).\
all()
@require_admin_context
def certificate_get_all_by_user(context, user_id):
return model_query(context, models.Certificate, read_deleted="no").\
filter_by(user_id=user_id).\
all()
@require_admin_context
def certificate_get_all_by_user_and_project(context, user_id, project_id):
return model_query(context, models.Certificate, read_deleted="no").\
filter_by(user_id=user_id).\