Elena Ezhova dd4b77ff53 Forbid regular users to reset admin-only attrs to default values ... A regular user can reset an admin-only attribute to its default value due to the fact that a corresponding policy rule is enforced only in the case when an attribute is present in the target AND has a non-default value. Added a new attribute "attributes_to_update" which contains a list of all to-be updated attributes to the body of the target that is passed to policy.enforce. Changed a check for whether an attribute is explicitly set. Now, in the case of update, the function should not pay attention to a default value of an attribute, but check whether it was explicitly marked as being updated. Added unit-tests. Conflicts: neutron/common/constants.py Closes-Bug: #1357379 Related-Bug: #1338880 Change-Id: I6537bb1da5ef0d6899bc71e4e949f2c760c103c2 (cherry picked from commit 74d1093990)		2014-09-25 17:14:33 +02:00
..
rpc	Fix misleading error message about failed dhcp notifications	2014-03-17 16:32:44 -07:00
v2	Forbid regular users to reset admin-only attrs to default values	2014-09-25 17:14:33 +02:00
views	Rename Quantum to Neutron	2013-07-06 15:02:43 -04:00
__init__.py	Rename Quantum to Neutron	2013-07-06 15:02:43 -04:00
api_common.py	Rename Quantum to Neutron	2013-07-06 15:02:43 -04:00
extensions.py	Makes the Extension loader behavior predictable	2014-03-06 12:44:27 -08:00
versions.py	Update RPC code from oslo	2014-01-15 04:26:57 -08:00