Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-08 Thread Fox, Kevin M
+1 From: Adam Young Sent: Friday, September 04, 2015 7:43:08 PM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] This is what disabled-by-policy should look like to the user On 09/04/2015 10:04 AM, Monty Taylor wrote: > mordred@camelot:~$

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-08 Thread Adam Young
On 09/06/2015 03:31 PM, Duncan Thomas wrote: On 5 Sep 2015 05:47, "Adam Young" > wrote: > Then let my Hijack: > > Policy is still broken. We need the pieces of Dynamic policy. > > I am going to call for a cross project policy discussion for the

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-06 Thread Duncan Thomas
On 5 Sep 2015 05:47, "Adam Young" wrote: > Then let my Hijack: > > Policy is still broken. We need the pieces of Dynamic policy. > > I am going to call for a cross project policy discussion for the upcoming summit. Please, please, please all the projects attend. The

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-05 Thread John Griffith
On Fri, Sep 4, 2015 at 8:04 AM, Monty Taylor wrote: > mordred@camelot:~$ neutron net-create test-net-mt > Policy doesn't allow create_network to be performed. > > Thank you neutron. Excellent job. > > Here's what that looks like at the REST layer: > > DEBUG:

[openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Monty Taylor
mordred@camelot:~$ neutron net-create test-net-mt Policy doesn't allow create_network to be performed. Thank you neutron. Excellent job. Here's what that looks like at the REST layer: DEBUG: keystoneclient.session RESP: [403] date: Fri, 04 Sep 2015 13:55:47 GMT connection: close content-type:

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Monty Taylor
On 09/04/2015 10:55 AM, Morgan Fainberg wrote: On Sep 4, 2015, at 07:04, Monty Taylor wrote: mordred@camelot:~$ neutron net-create test-net-mt Policy doesn't allow create_network to be performed. Thank you neutron. Excellent job. Here's what that looks like at the

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Morgan Fainberg
> On Sep 4, 2015, at 07:04, Monty Taylor wrote: > > mordred@camelot:~$ neutron net-create test-net-mt > Policy doesn't allow create_network to be performed. > > Thank you neutron. Excellent job. > > Here's what that looks like at the REST layer: > > DEBUG:

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Mathieu Gagné
On 2015-09-04 12:50 PM, Monty Taylor wrote: > On 09/04/2015 10:55 AM, Morgan Fainberg wrote: >> >> Obviously the translation of errors >> would be more difficult if the enforcer is generating messages. > > The type: "PolicyNotAuthorized" is a good general key. Also - even > though the command I

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread John Griffith
On Fri, Sep 4, 2015 at 11:35 AM, Mathieu Gagné wrote: > On 2015-09-04 12:50 PM, Monty Taylor wrote: > > On 09/04/2015 10:55 AM, Morgan Fainberg wrote: > >> > >> Obviously the translation of errors > >> would be more difficult if the enforcer is generating messages. > > > >

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Morgan Fainberg
On Fri, Sep 4, 2015 at 10:35 AM, Mathieu Gagné wrote: > On 2015-09-04 12:50 PM, Monty Taylor wrote: > > On 09/04/2015 10:55 AM, Morgan Fainberg wrote: > >> > >> Obviously the translation of errors > >> would be more difficult if the enforcer is generating messages. > > > >

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Monty Taylor
On 09/04/2015 01:42 PM, John Griffith wrote: On Fri, Sep 4, 2015 at 11:35 AM, Mathieu Gagné wrote: On 2015-09-04 12:50 PM, Monty Taylor wrote: On 09/04/2015 10:55 AM, Morgan Fainberg wrote: Obviously the translation of errors would be more difficult if the enforcer is

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Mathieu Gagné
On 2015-09-04 2:41 PM, Monty Taylor wrote: > On 09/04/2015 01:42 PM, John Griffith wrote: >> >> ​Is no good? You would like to see "less" in the output; like just the >> command name itself and "Policy doesn't allow"? >> >> To Mathieu's point, fair statement WRT the visibility of the policy name.

Re: [openstack-dev] This is what disabled-by-policy should look like to the user

2015-09-04 Thread Adam Young
On 09/04/2015 10:04 AM, Monty Taylor wrote: mordred@camelot:~$ neutron net-create test-net-mt Policy doesn't allow create_network to be performed. Thank you neutron. Excellent job. Here's what that looks like at the REST layer: DEBUG: keystoneclient.session RESP: [403] date: Fri, 04 Sep 2015