openstack
/
keystone
Code Issues Proposed changes

Fix policies for groups 

This patch fixes a couple of broken policies in the groups resource.

Change-Id: Ia47ecc71c04bcb50c2e0d677a99b3754ffbc1c04
This commit is contained in:
Douglas Mendizábal 2024-01-25 15:37:50 -05:00
parent c89655a6d1
commit df8f8eed1e
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
keystone/common/policies/group.py
View File

@ -21,7 +21,7 @@ SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_USER_OR_OWNER = (
'user_id:%(user_id)s' 'user_id:%(user_id)s'
) )
ADMIN_OR_SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_OR_OWNER = ( ADMIN_OR_SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_OR_OWNER = (
'(' + base.RULE_ADMIN_REQUIRED + ') or (' + '(' + base.RULE_ADMIN_REQUIRED + ') or ' +
SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_USER_OR_OWNER SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_USER_OR_OWNER
) )
@ -32,7 +32,7 @@ SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP_USER = (
'domain_id:%(target.user.domain_id)s)' 'domain_id:%(target.user.domain_id)s)'
) )
ADMIN_OR_SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP = ( ADMIN_OR_SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP = (
'(' + base.RULE_ADMIN_REQUIRED + ') or (' + '(' + base.RULE_ADMIN_REQUIRED + ') or ' +
SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP_USER SYSTEM_READER_OR_DOMAIN_READER_FOR_TARGET_GROUP_USER
) )