User keystone policy to check if user password can be updated

[Lin Hua Cheng]

Keystone have a policy for change password, we need to apply this to horizon too.

policy:
  "identity:change_password": "rule:owner",

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/117405

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/117405
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=2e0444b97b33c95eada1e9246b28a416c28ea384
Submitter: Jenkins
Branch: master

commit 2e0444b97b33c95eada1e9246b28a416c28ea384
Author: liyingjun <email address hidden>
Date: Thu Aug 7 22:08:02 2014 +0800

    User keystone policy to check if user password can be updated

    Keystone have a policy for change password, we need to apply this to
    horizon too.

    policy:
      "identity:change_password": "rule:admin_or_owner"

    Change-Id: Idd35646f9cbe4fadaa96bc85b243ed4f7823d9dd
    Closes-bug: 1347354

[Julie Pichon (jpichon)]

It looks like the policy name already exists in Icehouse, so this would make for a nice backport too.

https://github.com/openstack/keystone/blob/stable/icehouse/etc/policy.json

[Julie Pichon (jpichon)]

Although, Horizon didn't have it in its own policy file: https://github.com/openstack/horizon/blob/stable/icehouse/openstack_dashboard/conf/keystone_policy.json so we will want to make sure first that the default behaviour doesn't change after adding this, when the rule doesn't exist (can't recall the default right now)