openstack
/
nova
Code Issues Proposed changes

Introduce scope_types in security_groups policy 

Appropriate scope_type for nova case:
- https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html#scope

This commit introduce scope_type for security_groups policies
as 'system' and 'project'

Partial implement blueprint policy-defaults-refresh-deprecated-apis

Change-Id: Ibf6ba7da4bd8a3b9b3c7b112828959c2ff2b3f73
This commit is contained in:
Ghanshyam Mann 2020-07-23 17:10:30 -05:00
parent 80156827ed
commit 2939847226
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nova/policies/security_groups.py
View File

@ -64,7 +64,8 @@ APIs are deprecated.""",
'method': 'DELETE',
'path': '/os-security-groups/{security_group_id}'
},
]),
],
scope_types=['system', 'project']),
policy.DocumentedRuleDefault(
name=POLICY_NAME % 'list',
check_str=base.PROJECT_READER_OR_SYSTEM_READER,