openstack
/
oslo.policy
Code Issues Proposed changes
Rules engine to enforce access control policy
551 Commits 9 Branches 40 Tags 6.4 MiB
Python 100%
Go to file
Juan Antonio Osorio Robles f79650325f Add ability to pass in target data for the oslopolicy-checker 
This allows us to test the policy for other services which might have
different or unusual target data formats (such as Barbican). It would be
possible to pass it as a nested dictionary, e.g.:

{
    "target": {
        "secret": {
            "project_id": "my project id"
        }
    }
}

or as a key pair (as oslo.policy would expect):
{
    "target.secret.project_id": "my project id"
}

Both will work (note that this logic was taken from barbican).

This fixes around the limitation that the target is hardcoded to be
"project_id", and thus allows to test more scenarios (such as the
project ID not matching).

Change-Id: Ia9f7462072a8cb142251c8bb5ef19d9a25a98119
 		2018-11-02 14:14:21 +02:00
doc/source Add minor nits in testing documentation 2018-10-16 17:38:29 +00:00
oslo_policy Add ability to pass in target data for the oslopolicy-checker 2018-11-02 14:14:21 +02:00
releasenotes Add ability to pass in target data for the oslopolicy-checker 2018-11-02 14:14:21 +02:00
sample_data Add oslopolicy-checker command-line tool 2016-01-12 15:44:03 -06:00
.coveragerc Fix coverage configuration and execution 2015-10-01 15:39:58 +00:00
.gitignore Clean up .gitignore references to personal tools 2018-10-15 11:50:32 +08:00
.gitreview exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
.mailmap exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
.stestr.conf Fix requirements and convert to stestr 2018-07-02 17:30:07 +00:00
.zuul.yaml add lib-forward-testing-python3 test job 2018-08-11 18:20:14 -04:00
CONTRIBUTING.rst Optimize the link address 2017-04-08 23:36:11 +08:00
HACKING.rst Update URLs in documents according to document migration 2017-07-12 23:01:31 +08:00
LICENSE exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
README.rst Remove PyPI downloads 2018-08-07 06:00:35 +00:00
babel.cfg exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
lower-constraints.txt Teach Enforcer.enforce to deal with context objects 2018-07-09 16:46:57 +00:00
requirements.txt Teach Enforcer.enforce to deal with context objects 2018-07-09 16:46:57 +00:00
setup.cfg http/https check rules as stevedore extensions 2017-10-05 08:40:47 -04:00
setup.py Updated from global requirements 2017-03-03 03:07:08 +00:00
test-requirements.txt Teach Enforcer.enforce to deal with context objects 2018-07-09 16:46:57 +00:00
tox.ini Fix requirements and convert to stestr 2018-07-02 17:30:07 +00:00

README.rst

Team and repository tags

image

oslo.policy

Latest Version

The Oslo Policy library provides support for RBAC policy enforcement across all OpenStack services.