DB Api doesn't filter per tenant

[Sylvain Bauza]

Regression appeared with the context refactoring, as model_queries does filter as per context.project_id while the context is not having this key but tenant_id. As a result, any user can query the API and get all the results for all tenants...

Lease is also not having project_id stored.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/59109

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/59109
Committed: https://git.openstack.org/cgit/stackforge/climate/commit/?id=9fc6b17f8761b046987438df7ed7a0c1a146d639
Submitter: Jenkins
Branch: master

commit 9fc6b17f8761b046987438df7ed7a0c1a146d639
Author: sbauza <email address hidden>
Date: Fri Nov 29 00:35:48 2013 +0100

    Filter DB queries per project_id

    Currently, DB queries don't filter on project_id, so any user can
    request all DB entries.

    The proposal here is to filter if the table does support tenant_id
    in it and if the user is not admin (based on Nova/Cinder/Oslo)

    In order to automatically provide the correct is_admin flag, now
    when creating the context we check if policy defines the user as
    admin.

    Closes-Bug: #1256117

    Change-Id: I85c404f5a3365c6a9c575af52f1a116f8350f426