x/python-ganttclient
Code Issues Proposed changes

Change all tenants servers listing as policy-based

Browse Source 
Currently when list servers from all tenants (i.e. --all-tenants is set as 1
when "nova list"), privilege is required.

However, computer pollster in ceilometer need to get all instances from
all tenants in one host. Granting admin privilege to the pollster is
not very secure.

All tenants servers list should be policy-based, instead of requiring
admin privelege.

There is one potential backward compatibility. With all_tenants specified,
non-admin accounts will get back owned servers only without this patch,
however it will get policy exception now if policy checking failed. IMHO
the new behaviour makes more sense.

Change-Id: I8f1f064434ab12b6c0cd636f84dfc1b6a9b2fc90
Signed-off-by: Yunhong, Jiang <yunhong.jiang@intel.com>
This commit is contained in:
Yunhong, Jiang
2012-11-15 14:19:57 +08:00
parent c2d07d50a6
commit ea864bff0b
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
nova/tests/policy.json
View File

@@ -8,6 +8,7 @@
"compute:get": "",
"compute:get_all": "",
"compute:get_all_tenants": "",
"compute:update": "",