Using policies for protected properties

[OpenStack Infra]

https://review.openstack.org/48076
commit eb87f1fae8f13c7ab09c9fec56bbfa1fdfdf17fc
Author: iccha.sethi <email address hidden>
Date: Sun Sep 15 15:37:57 2013 +0000

    Using policies for protected properties

    This patch extends the way we can define rules for property protections.
    It allows us to use the roles/rules defined in policy.json and leverage
    the policy language for property protections as well.

    DocImpact

    Related to bp api-v2-property-protection

    Change-Id: I4789ebb2645171280185d2c76138e78d954b5954

[Tom Fifield (fifieldt)]

This is a new feature that needs to be documented with a new section. Perhaps somewhere similar to policy.json

[Tom Fifield (fifieldt)]

That new section I mentioned earlier, is probably just an introductory paragraph about the feature, potentially followed by importing the etc/property-*-conf.sample like we do for policy.json

[Brian Rosmaita (brian-rosmaita)]

This feature is currently discussed in the "OpenStack Cloud Administrator Guide" > "Compute" > "Images and instances" > "Image properties and property protection", but the discussion there is a bit inaccurate and could use a rewrite. Key problem is that it is not clear about the fact that the policy.json file is used to set policies for Glance actions as well as for property protections.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/281066

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/281066
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=23dd031ebefaf3403b76f9464be6b711b8033844
Submitter: Jenkins
Branch: master

commit 23dd031ebefaf3403b76f9464be6b711b8033844
Author: Lana Brindley <email address hidden>
Date: Wed Feb 17 16:11:12 2016 +1000

    Adding information about policy.json file

    As per bug, adding note that the policy.json file can be
    used to set policies for Glance actions, as well as for
    property protections.

    Change-Id: Ie154633334c91db1e06ea16638f6c239f2a24b83
    Closes-Bug: #1241116

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.