0f3aeaa839
This commit adds support for reader role for all sw-manager
commands. The behavior is that "get" commands like
"upgrade-strategy show" requires reader role in the admin or services
project. Other commands requires admin role in the admin or services
project. Before this change, all the commands affected by the change
checks the admin_in_system_projects rule. Now they either check
rules with different names but same effect for customizability,
or check for reader role. The overall effect is loosening the
restrictions on "get" style commands.
Test Cases:
PASS: Existing admin user can execute all commands
PASS: New admin user with admin role in admin project behaves like
existing admin
PASS: New user with reader role can only run sw-manager something show.
apply, abort, create and delete denies the request
PASS: New admin user of a different project but has no roles, admin
or reader in the admin project is denied all access
PASS: dcmanager user behaves like existing admin.
PASS: horizon GUI access
Change-Id: I0d924b91583efb8191202f142f12d8f151f6feec
Story: 2010149
Task: 46119
Signed-off-by: Jerry Sun <jerry.sun@windriver.com>
|
||
|---|---|---|
| .. | ||
| nfv_vim | ||
| scripts | ||
| LICENSE | ||
| setup.py | ||