Andrew Bogott has uploaded a new change for review.
https://gerrit.wikimedia.org/r/279729
Change subject: Designate policy: Allow non-projectadmins to view and list
domains and records.
......................................................................
Designate policy: Allow non-projectadmins to view and list domains and records.
Previously if a non-projectadmin clicked on the 'domains' tab
they were immediately logged out, which seems rude. This fixes
that.
Change-Id: Ic57993f8277a6a6638a7963c2ffd74beaea5f9de
---
M modules/openstack/files/liberty/designate/policy.json
1 file changed, 8 insertions(+), 8 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/29/279729/1
diff --git a/modules/openstack/files/liberty/designate/policy.json
b/modules/openstack/files/liberty/designate/policy.json
index 79c234c..3f5422d 100644
--- a/modules/openstack/files/liberty/designate/policy.json
+++ b/modules/openstack/files/liberty/designate/policy.json
@@ -39,22 +39,22 @@
"get_domains": "rule:admin_or_member",
"get_domain": "rule:admin_or_member",
"get_domain_servers": "rule:admin_or_member",
- "find_domains": "rule:admin_or_projectadmin",
- "find_domain": "rule:admin_or_projectadmin",
+ "find_domains": "rule:admin_or_member",
+ "find_domain": "rule:admin_or_member",
"update_domain": "rule:admin",
"delete_domain": "rule:admin",
"abandon_domain": "rule:admin",
- "count_domains": "rule:admin_or_projectadmin",
+ "count_domains": "rule:admin_or_member",
"touch_domain": "rule:admin",
"create_record": "rule:admin_or_projectadmin",
- "get_records": "rule:admin_or_projectadmin",
- "get_record": "rule:admin_or_projectadmin",
- "find_records": "rule:admin_or_projectadmin",
- "find_record": "rule:admin_or_projectadmin",
+ "get_records": "rule:admin_or_member",
+ "get_record": "rule:admin_or_member",
+ "find_records": "rule:admin_or_member",
+ "find_record": "rule:admin_or_member",
"update_record": "rule:admin_or_projectadmin",
"delete_record": "rule:admin_or_projectadmin",
- "count_records": "rule:admin_or_projectadmin",
+ "count_records": "rule:admin_or_member",
"use_sudo": "rule:admin",
--
To view, visit https://gerrit.wikimedia.org/r/279729
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic57993f8277a6a6638a7963c2ffd74beaea5f9de
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
