Rules engine to enforce access control policy
Go to file
Thomas Duval 70ba1beb3e Modification to add additional information in the HTTPCheck request.
make it easier to reuse the invocation logic for check objects

Provide a new private function in oslo_policy._checks to evaluate a
check object. This function protects against API changes to the check
classes by inspecting the set of arguments accepted.

Update Enforcer to use the new function instead of invoking checks
directly.

Update the nested check classes (and, or, not) to use the new function
instead of invoking their sub-rules directly.

Update the way mocks were being used in some tests to replace them
with real minimal classes that implement the necessary APIs.

Simplify a few tests that were confirming multiple behaviors (for
example, the result of a compound check as well as the arguments
passed to its nested rules).

Ensure that we have test cases for invoking nested rules that do and
do not accept the new current_rule argument.

Change-Id: Ib9edd7954d0b977950be536fa9434243b0de7fcf
Signed-off-by: Doug Hellmann <doug@doughellmann.com>
2017-09-27 11:53:27 +02:00
doc/source Merge "switch from oslosphinx to openstackdocstheme" 2017-07-05 14:20:15 +00:00
oslo_policy Modification to add additional information in the HTTPCheck request. 2017-09-27 11:53:27 +02:00
releasenotes Update reno for stable/pike 2017-07-28 21:05:12 +00:00
sample_data Add oslopolicy-checker command-line tool 2016-01-12 15:44:03 -06:00
tools Add Constraints support 2016-12-20 14:34:04 +11:00
.coveragerc Fix coverage configuration and execution 2015-10-01 15:39:58 +00:00
.gitignore move existing documentation into new standard layout 2017-06-28 16:46:38 -04:00
.gitreview exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
.mailmap exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
.testr.conf exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
CONTRIBUTING.rst Optimize the link address 2017-04-08 23:36:11 +08:00
HACKING.rst Update URLs in documents according to document migration 2017-07-12 23:01:31 +08:00
LICENSE exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
README.rst Update URLs in documents according to document migration 2017-07-12 23:01:31 +08:00
babel.cfg exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
requirements.txt Updated from global requirements 2017-09-11 21:28:23 +00:00
setup.cfg Update URLs in documents according to document migration 2017-07-12 23:01:31 +08:00
setup.py Updated from global requirements 2017-03-03 03:07:08 +00:00
test-requirements.txt Updated from global requirements 2017-09-20 16:23:09 +00:00
tox.ini Remove references to Python 3.4 2017-01-09 10:17:01 -08:00

README.rst

Team and repository tags

image

oslo.policy

Latest Version

Downloads

The Oslo Policy library provides support for RBAC policy enforcement across all OpenStack services.