openstack
/
oslo.policy
Code Issues Proposed changes
Rules engine to enforce access control policy
583 Commits 9 Branches 150 Tags 6.4 MiB
Python 100%
Go to file
Ben Nemec 0a4adba1a5 Fix reference cycle caused by deprecated sample override 
In the sample policy generator, we create a rule that maps the
deprecated name of a policy to the new rule name. For example:

identity:old_rule: rule:identity:new_rule

However, in the policy code, if we see an override of a deprecated
name and no override for the new name, we apply the value of the
deprecated name to the new name. In the above case, this results
in us creating a rule that looks like:

identity:new_rule: rule:identity:new_rule

which is a circular reference and nonsense.

To fix this, I added a check to the deprecated rule logic that looks
for instances where the old override is just a reference to the new
rule. If that's the case, then we don't need to do anything because
it's already doing the right thing.

Change-Id: Ifd14993bc84e83c13abab3456fbf670c06e5806f
Closes-Bug: 1843931
(cherry picked from commit 82a2c8d8b7)
 		2019-09-24 13:21:16 +00:00
doc/source Correct typo in docs 2018-11-26 15:15:26 -05:00
oslo_policy Fix reference cycle caused by deprecated sample override 2019-09-24 13:21:16 +00:00
releasenotes Add policy-upgrade tool 2018-12-11 10:32:47 +08:00
sample_data Add oslopolicy-checker command-line tool 2016-01-12 15:44:03 -06:00
.coveragerc Fix coverage configuration and execution 2015-10-01 15:39:58 +00:00
.gitignore Clean up .gitignore references to personal tools 2018-10-15 11:50:32 +08:00
.gitreview OpenDev Migration Patch 2019-04-19 19:29:49 +00:00
.mailmap exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
.stestr.conf Fix requirements and convert to stestr 2018-07-02 17:30:07 +00:00
.zuul.yaml add python 3.7 unit test job 2019-02-19 13:56:43 +08:00
CONTRIBUTING.rst Optimize the link address 2017-04-08 23:36:11 +08:00
HACKING.rst Update URLs in documents according to document migration 2017-07-12 23:01:31 +08:00
LICENSE exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
README.rst Remove PyPI downloads 2018-08-07 06:00:35 +00:00
babel.cfg exported from oslo-incubator by graduate.sh 2014-12-09 14:40:01 -03:00
lower-constraints.txt Add domain scope support for scope types 2018-11-30 14:52:36 +00:00
requirements.txt Add domain scope support for scope types 2018-11-30 14:52:36 +00:00
setup.cfg Add policy-upgrade tool 2018-12-11 10:32:47 +08:00
setup.py Updated from global requirements 2017-03-03 03:07:08 +00:00
test-requirements.txt Update hacking version 2019-02-13 14:33:45 +08:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/stein 2019-03-18 14:45:46 +00:00

README.rst

Team and repository tags

image

oslo.policy

Latest Version

The Oslo Policy library provides support for RBAC policy enforcement across all OpenStack services.