From a3927b5fb5f5986b7cc15a8f406b7891c57d766d Mon Sep 17 00:00:00 2001 From: Eli Qiao Date: Thu, 23 Apr 2015 15:21:54 +0800 Subject: [PATCH] API: remove admin require from certificate_* from db layer This patch removes require_admin_context decorator certificate_* because, they are only called by nova code, no user interface code (REST API layer) will call these methods, so there is no require to hard limit admin context to query db. Partially implements bp nova-api-policy-final-part Change-Id: I2536f31096d4322390c6f00f4019dbabcb11226e --- nova/db/sqlalchemy/api.py | 4 ---- 1 file changed, 4 deletions(-) diff --git a/nova/db/sqlalchemy/api.py b/nova/db/sqlalchemy/api.py index bb7c70d82..74b54ec33 100644 --- a/nova/db/sqlalchemy/api.py +++ b/nova/db/sqlalchemy/api.py @@ -692,7 +692,6 @@ def compute_node_statistics(context): ################### -@require_admin_context def certificate_create(context, values): certificate_ref = models.Certificate() for (key, value) in values.iteritems(): @@ -701,21 +700,18 @@ def certificate_create(context, values): return certificate_ref -@require_admin_context def certificate_get_all_by_project(context, project_id): return model_query(context, models.Certificate, read_deleted="no").\ filter_by(project_id=project_id).\ all() -@require_admin_context def certificate_get_all_by_user(context, user_id): return model_query(context, models.Certificate, read_deleted="no").\ filter_by(user_id=user_id).\ all() -@require_admin_context def certificate_get_all_by_user_and_project(context, user_id, project_id): return model_query(context, models.Certificate, read_deleted="no").\ filter_by(user_id=user_id).\