These changes are necessary so policy files can in include the check
"is_admin_project:True" which allows us to Scope what is meant by "Admin"
Use from_environ to load context
Use to_policy_values for enforcing policy
Use context from_environ to load contexts
Use from_dict to load context params
https://review.openstack.org/340206 <https://review.openstack.org/340206>
https://review.openstack.org/340205 <https://review.openstack.org/340205>
https://review.openstack.org/340195 <https://review.openstack.org/340195>
https://review.openstack.org/340194 <https://review.openstack.org/340194>
Let's please get them merged. This will improve RBAC for all of the
services.
It looks like there are a handful for Cue as well:
Use oslo.context's from_environ to create context
Use standard to_policy_values for policy enforcement
Explicitly load context attributes in from_dict
https://review.openstack.org/#/c/345694/
https://review.openstack.org/#/c/345695/
https://review.openstack.org/#/c/345693/
Try to go light on the testing requirements in review feedback, as Jamie
is working tio make this happen across a lot of projects.
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
