context_is_admin policy can only take roles rules

[Wenhao Xu]

branch: master
commit: ee955d272ab4eef2e8371f2e460454058ce7e46c

context_is_admin role is used by nova to check if the current user is the admin. But it can only take roles rules.

So a generic rule doesn't work:
   "context_is_admin": "user_name:%(project_name)s"

It can only accept rules like this:
   "context_is_admin": "role:admin or role:nova-admin"

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/21417

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/21417
Committed: http://github.com/openstack/nova/commit/1d07c12ecad0ace2caae7baecd9f0f669b62cc35
Submitter: Jenkins
Branch: master

commit 1d07c12ecad0ace2caae7baecd9f0f669b62cc35
Author: Wenhao Xu <email address hidden>
Date: Thu Feb 7 17:18:12 2013 +0800

    Allow generic rules in context_is_admin rule in policy.

    context_is_admin role is used by nova to check if
    the current user is the admin. But it can only check
    role rules. The fix allow generic rules in context_is_admin.

    DocImpact

    Fixes bug 1118142

    Change-Id: Ib4823a67fe63d5356fc8c9280a2013b8855f5217