deb-keystone/keystone/models
Steve Martinelli ef48072d94 Fix cloud_admin rule and ensure only project tokens can be cloud admin
The current rule fails to load with oslo.policy, the correct
value used to determine the admin project for the cloud_admin should
simply be: `is_admin_project:True`, since that is what is stored
in oslo.context.

This problem was masking a more serious issue that domain admin tokens
could be misinterpreted as cloud admin tokens.

Change-Id: I3ea562c01e06e6c519fdaec3ab6e1dac204ced71
Closes-Bug: 1547684
Closes-Bug: 1651989
2016-12-23 09:31:08 +00:00
..
__init__.py Add the new Keystone TokenModel 2014-07-25 09:50:27 -07:00
revoke_model.py Remove unused statements in matches 2016-11-21 19:11:49 +00:00
token_model.py Fix cloud_admin rule and ensure only project tokens can be cloud admin 2016-12-23 09:31:08 +00:00