Ensure orders policy-in-code matches controller
Policy-in-code for orders API did not map properly to orders controller. Moved `ordeR:put` rule to `orderS:put` to all in line with what is expected. Change-Id: I18fc3e9d2772e3f9813aad2a79e8864cf0511abf
This commit is contained in:
parent
d32e82e241
commit
0a25617483
|
@ -18,10 +18,10 @@ rules = [
|
||||||
'rule:admin_or_creator'),
|
'rule:admin_or_creator'),
|
||||||
policy.RuleDefault('orders:get',
|
policy.RuleDefault('orders:get',
|
||||||
'rule:all_but_audit'),
|
'rule:all_but_audit'),
|
||||||
|
policy.RuleDefault('orders:put',
|
||||||
|
'rule:admin_or_creator'),
|
||||||
policy.RuleDefault('order:get',
|
policy.RuleDefault('order:get',
|
||||||
'rule:all_users'),
|
'rule:all_users'),
|
||||||
policy.RuleDefault('order:put',
|
|
||||||
'rule:admin_or_creator'),
|
|
||||||
policy.RuleDefault('order:delete',
|
policy.RuleDefault('order:delete',
|
||||||
'rule:admin'),
|
'rule:admin'),
|
||||||
]
|
]
|
||||||
|
|
|
@ -0,0 +1,10 @@
|
||||||
|
---
|
||||||
|
features:
|
||||||
|
- |
|
||||||
|
Remap the `order:put` to `orders:put` to align with language in the orders
|
||||||
|
controller.
|
||||||
|
upgrade:
|
||||||
|
- |
|
||||||
|
(For deployments overriding default policies) After upgrading, please review
|
||||||
|
Barbican policy files and ensure that you port any rules tied to `order:put`
|
||||||
|
are remapped to `orders:put`.
|
Loading…
Reference in New Issue