openstack
/
keystone
Code Issues Proposed changes

Merge "Remove project policies from policy.v3cloudsample.json"

This commit is contained in:
Zuul 2019-03-21 18:29:10 +00:00 committed by Gerrit Code Review
parent c12a0624d5 546b7f1bba
commit 5aac4acbfa
2 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
etc/policy.v3cloudsample.json
View File

@ -17,14 +17,6 @@
"identity:update_limit": "rule:admin_required",
"identity:delete_limit": "rule:admin_required",
"admin_and_matching_target_project_domain_id": "rule:admin_required and domain_id:%(target.project.domain_id)s",
"admin_and_matching_project_domain_id": "rule:admin_required and domain_id:%(project.domain_id)s",
"identity:get_project": "rule:cloud_admin or rule:admin_and_matching_target_project_domain_id or project_id:%(target.project.id)s",
"identity:list_projects": "rule:cloud_admin or rule:admin_and_matching_domain_id",
"identity:list_user_projects": "rule:owner or rule:admin_and_matching_domain_id",
"identity:create_project": "rule:cloud_admin or rule:admin_and_matching_project_domain_id",
"identity:update_project": "rule:cloud_admin or rule:admin_and_matching_target_project_domain_id",
"identity:delete_project": "rule:cloud_admin or rule:admin_and_matching_target_project_domain_id",
"identity:create_project_tag": "rule:admin_required",
"identity:delete_project_tag": "rule:admin_required",
"identity:get_project_tag": "rule:admin_required",

6
keystone/tests/unit/test_policy.py
View File

@ -231,6 +231,12 @@ class PolicyJsonTestCase(unit.TestCase):
'identity:list_domains',
'identity:update_domain',
'identity:delete_domain',
'identity:create_project',
'identity:get_project',
'identity:list_projects',
'identity:update_project',
'identity:delete_project',
'identity:list_user_projects',
'identity:create_service',
'identity:get_service',
'identity:list_services',